b565ac1b9d41c13acfbe51902cd41e61a3a1aed720b7a9676e0851cc63d9475e | Triage

Sharing

General

Target

2cee6024eb539b2dea295ba9cf05d7ee_JaffaCakes118
Size

731KB
Sample

240708-tdl8ssygne
MD5

2cee6024eb539b2dea295ba9cf05d7ee
SHA1

0c5372ff3fcc0f0df8b838ae592e51085d43a7e0
SHA256

b565ac1b9d41c13acfbe51902cd41e61a3a1aed720b7a9676e0851cc63d9475e
SHA512

93116823de88da54fd23224a50864d23f6847e558ab1d337c79be73f055f9af675ffec2e220cfa19e56728a6dc233863bc4a3875773ebb7083c322d099b4619e
SSDEEP

12288:Jaingtd/9iCpVEZxzraxdUdpmCFmjnDgGeIttwoPR5pWZhAIRXHYnrmt:JaigD/ArravUdsCwnlFttwYQRXHYrmt

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  2cee6024eb539b2dea295ba9cf05d7ee_JaffaCakes118
- Size
  
  731KB
- MD5
  
  2cee6024eb539b2dea295ba9cf05d7ee
- SHA1
  
  0c5372ff3fcc0f0df8b838ae592e51085d43a7e0
- SHA256
  
  b565ac1b9d41c13acfbe51902cd41e61a3a1aed720b7a9676e0851cc63d9475e
- SHA512
  
  93116823de88da54fd23224a50864d23f6847e558ab1d337c79be73f055f9af675ffec2e220cfa19e56728a6dc233863bc4a3875773ebb7083c322d099b4619e
- SSDEEP
  
  12288:Jaingtd/9iCpVEZxzraxdUdpmCFmjnDgGeIttwoPR5pWZhAIRXHYnrmt:JaigD/ArravUdsCwnlFttwYQRXHYrmt
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation