General
-
Target
10a76be9d52bb0a20ecb1bc3229b6450_JaffaCakes118
-
Size
112KB
-
Sample
240626-ek1bnstelc
-
MD5
10a76be9d52bb0a20ecb1bc3229b6450
-
SHA1
dc2689b6e45da29c4fae8f36be982c5d7fa242d6
-
SHA256
aaa0aff16a88217f22efd8e558b002689294d5eafb6502bad64c4c3f63aaf451
-
SHA512
1cfe902769a441013575fba4736fdda6a1b1050d386c869b9dbe6b071f2d41c87b38fbf33b6ae2e1548592246d11c7c10b59f14ec8df9cade74951280fe80c48
-
SSDEEP
1536:d0t6BnADEqdKlT0TMDt1bIL4vGt2SZA6LsSjIfSwbylA3CPRl:M6BADE/lT0QE8vGtLsRSwul9Rl
Static task
static1
Behavioral task
behavioral1
Sample
10a76be9d52bb0a20ecb1bc3229b6450_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
10a76be9d52bb0a20ecb1bc3229b6450_JaffaCakes118
-
Size
112KB
-
MD5
10a76be9d52bb0a20ecb1bc3229b6450
-
SHA1
dc2689b6e45da29c4fae8f36be982c5d7fa242d6
-
SHA256
aaa0aff16a88217f22efd8e558b002689294d5eafb6502bad64c4c3f63aaf451
-
SHA512
1cfe902769a441013575fba4736fdda6a1b1050d386c869b9dbe6b071f2d41c87b38fbf33b6ae2e1548592246d11c7c10b59f14ec8df9cade74951280fe80c48
-
SSDEEP
1536:d0t6BnADEqdKlT0TMDt1bIL4vGt2SZA6LsSjIfSwbylA3CPRl:M6BADE/lT0QE8vGtLsRSwul9Rl
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1