b8a6780d631933813dc8f4439d761acf686e4369e615e264a5298ec555b400ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3057c53c96a70509e952b12edf398b1e_JaffaCakes118
Size

649KB
Sample

240709-pf69javgpe
MD5

3057c53c96a70509e952b12edf398b1e
SHA1

27c272b38249106e2287cfa5ac8ad8b8108196cd
SHA256

b8a6780d631933813dc8f4439d761acf686e4369e615e264a5298ec555b400ad
SHA512

62bf7ec7e6e75910e6aeb8bb4c7e3c7072f5544ac78ace3e22c5f1301da06652df369b9508f669efa99b60115795a8f59b33ed2d77e6c51e6db9ea65244a663b
SSDEEP

12288:zq20BpltdyUDZX2wh5vA/OSXhVt0rYTGApYIQONYA4gT9CBqwN4IQ:QBTtdyO2wh5I1TPG3ISA4CwN

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  3057c53c96a70509e952b12edf398b1e_JaffaCakes118
- Size
  
  649KB
- MD5
  
  3057c53c96a70509e952b12edf398b1e
- SHA1
  
  27c272b38249106e2287cfa5ac8ad8b8108196cd
- SHA256
  
  b8a6780d631933813dc8f4439d761acf686e4369e615e264a5298ec555b400ad
- SHA512
  
  62bf7ec7e6e75910e6aeb8bb4c7e3c7072f5544ac78ace3e22c5f1301da06652df369b9508f669efa99b60115795a8f59b33ed2d77e6c51e6db9ea65244a663b
- SSDEEP
  
  12288:zq20BpltdyUDZX2wh5vA/OSXhVt0rYTGApYIQONYA4gT9CBqwN4IQ:QBTtdyO2wh5I1TPG3ISA4CwN
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation