General
-
Target
0ef464a140340a7207936b686f205d83_JaffaCakes118
-
Size
193KB
-
Sample
240625-v8bk8awejl
-
MD5
0ef464a140340a7207936b686f205d83
-
SHA1
d118ae8d8017d58bb798a8a39a9cf6e7b1f2b1f3
-
SHA256
c5e162e414eb40e1c41ba3225da8c539f60b1b26f049078cc0bae6c236bf3810
-
SHA512
357abf06f43e8e4a9734028a5a3f9bec0f04c06087b3d6769cc74071ebbc637f572226c1af30ad1832f604f928b3c12d3af069d3bba3a7488c9ff353b27afd40
-
SSDEEP
3072:A9q4GNmN8n/ohXQsbLBklT89AtZpMnh3fpJ1TY3Kp4ZbMsfPmGDNlbLG:whQselGgadtTWfuGhlK
Static task
static1
Behavioral task
behavioral1
Sample
0ef464a140340a7207936b686f205d83_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
0ef464a140340a7207936b686f205d83_JaffaCakes118
-
Size
193KB
-
MD5
0ef464a140340a7207936b686f205d83
-
SHA1
d118ae8d8017d58bb798a8a39a9cf6e7b1f2b1f3
-
SHA256
c5e162e414eb40e1c41ba3225da8c539f60b1b26f049078cc0bae6c236bf3810
-
SHA512
357abf06f43e8e4a9734028a5a3f9bec0f04c06087b3d6769cc74071ebbc637f572226c1af30ad1832f604f928b3c12d3af069d3bba3a7488c9ff353b27afd40
-
SSDEEP
3072:A9q4GNmN8n/ohXQsbLBklT89AtZpMnh3fpJ1TY3Kp4ZbMsfPmGDNlbLG:whQselGgadtTWfuGhlK
-
Modifies firewall policy service
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1