4772cea1874c35be783830e477351fe6d3bd580e6b83482068c52c559f5a505f | Triage

Sharing

General

Target

223e199541887817834aa922575c9bc0_JaffaCakes118
Size

305KB
Sample

240703-nqgk7azhqa
MD5

223e199541887817834aa922575c9bc0
SHA1

836845a3b4fd18c4f520e9fec18f421daf77b96c
SHA256

4772cea1874c35be783830e477351fe6d3bd580e6b83482068c52c559f5a505f
SHA512

a0ef062bc5a1e5d5d15ea5dd5831492405294b03efd4e2c483e634f7daa9e5525d77fc28d4f6d345263f9c4684ac7220c1b119f9333d89d2f5b4e13f1322b95d
SSDEEP

6144:9hgHdPkvWPDtJrrKDLfMLE51cHRjyeDyLOhrHhVH/:YdsvuDtJ3GLkfBr/

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  223e199541887817834aa922575c9bc0_JaffaCakes118
- Size
  
  305KB
- MD5
  
  223e199541887817834aa922575c9bc0
- SHA1
  
  836845a3b4fd18c4f520e9fec18f421daf77b96c
- SHA256
  
  4772cea1874c35be783830e477351fe6d3bd580e6b83482068c52c559f5a505f
- SHA512
  
  a0ef062bc5a1e5d5d15ea5dd5831492405294b03efd4e2c483e634f7daa9e5525d77fc28d4f6d345263f9c4684ac7220c1b119f9333d89d2f5b4e13f1322b95d
- SSDEEP
  
  6144:9hgHdPkvWPDtJrrKDLfMLE51cHRjyeDyLOhrHhVH/:YdsvuDtJ3GLkfBr/
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation