General
-
Target
0e9e14738a3417a2494d17438972ed59_JaffaCakes118
-
Size
1.1MB
-
Sample
240625-s4cxdaycqc
-
MD5
0e9e14738a3417a2494d17438972ed59
-
SHA1
8fb5ee3272b7bbc55df08a3c535855afbe6fa49f
-
SHA256
8ec06d2d1c8f8de4c948864a1c5991aaa3f50ce04a058fe8082e2bb5eca6a18e
-
SHA512
589ee0394c06c7d9e4983ef8ebe9ee29c832723163b3bd3a8c8dd557a180187e4681824cb4f338ec79d4b1be923bd123a24596ef454eec7e23e28688b4a0716f
-
SSDEEP
24576:Q9YM6RWENmvmC7pbln8V/hZVBqIAHMtcj:APREcvmmbluZZVBqIv6j
Static task
static1
Behavioral task
behavioral1
Sample
0e9e14738a3417a2494d17438972ed59_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
0e9e14738a3417a2494d17438972ed59_JaffaCakes118
-
Size
1.1MB
-
MD5
0e9e14738a3417a2494d17438972ed59
-
SHA1
8fb5ee3272b7bbc55df08a3c535855afbe6fa49f
-
SHA256
8ec06d2d1c8f8de4c948864a1c5991aaa3f50ce04a058fe8082e2bb5eca6a18e
-
SHA512
589ee0394c06c7d9e4983ef8ebe9ee29c832723163b3bd3a8c8dd557a180187e4681824cb4f338ec79d4b1be923bd123a24596ef454eec7e23e28688b4a0716f
-
SSDEEP
24576:Q9YM6RWENmvmC7pbln8V/hZVBqIAHMtcj:APREcvmmbluZZVBqIv6j
-
Modifies firewall policy service
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1