cb6d3d4636461ee782fc4fc5408cdfa1bfabcb21cdc6ae8cac70666dd6d55285 | Triage

Sharing

General

Target

27448606ac22c919cb2b52d445536e3a_JaffaCakes118
Size

733KB
Sample

240706-b2j48svbpf
MD5

27448606ac22c919cb2b52d445536e3a
SHA1

cfaaaaa13c6e6d970de40376d0493877d8d4b507
SHA256

cb6d3d4636461ee782fc4fc5408cdfa1bfabcb21cdc6ae8cac70666dd6d55285
SHA512

c085d739aeeaaf1abe0f2d24730473d715b6c27c026acf566096c7703a26a7cac137b276a719a06360ae87c56fe8404bee24b7480a88011c2bf644975179f590
SSDEEP

12288:13Fpj4rBRLukn+zKg2oOR2OQl5vAdmxQDgGeItGBV07XpWZhASRXHYnrmQ:1VpUFRUgoOwOY5vAqQlFtWVAqRXHYrmQ

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  27448606ac22c919cb2b52d445536e3a_JaffaCakes118
- Size
  
  733KB
- MD5
  
  27448606ac22c919cb2b52d445536e3a
- SHA1
  
  cfaaaaa13c6e6d970de40376d0493877d8d4b507
- SHA256
  
  cb6d3d4636461ee782fc4fc5408cdfa1bfabcb21cdc6ae8cac70666dd6d55285
- SHA512
  
  c085d739aeeaaf1abe0f2d24730473d715b6c27c026acf566096c7703a26a7cac137b276a719a06360ae87c56fe8404bee24b7480a88011c2bf644975179f590
- SSDEEP
  
  12288:13Fpj4rBRLukn+zKg2oOR2OQl5vAdmxQDgGeItGBV07XpWZhASRXHYnrmQ:1VpUFRUgoOwOY5vAqQlFtWVAqRXHYrmQ
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation