3a2210ad633826725be9c117c457e2e8e3412e5239ed3c4cb553ea4c0a395720 | Triage

Sharing

General

Target

34773a3bf8af2ff8f8287ff69e85c324_JaffaCakes118
Size

948KB
Sample

240710-m8jmtsthpr
MD5

34773a3bf8af2ff8f8287ff69e85c324
SHA1

86ceb898e28cdb41d045021185e11c668a996bd8
SHA256

3a2210ad633826725be9c117c457e2e8e3412e5239ed3c4cb553ea4c0a395720
SHA512

e3562164b306b0611637e1a5d59531b9f428fc6f7cc530d333f6b461da872a04c88dc12d290e6c8f5187b441e261da2f564fae9532b67147bb64101a5fba1207
SSDEEP

24576:aWdqE9Z1KhGep0m2Iz1HSLM22NC6QG63ENJA:aW4iaFpZeMHNCjP3

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  34773a3bf8af2ff8f8287ff69e85c324_JaffaCakes118
- Size
  
  948KB
- MD5
  
  34773a3bf8af2ff8f8287ff69e85c324
- SHA1
  
  86ceb898e28cdb41d045021185e11c668a996bd8
- SHA256
  
  3a2210ad633826725be9c117c457e2e8e3412e5239ed3c4cb553ea4c0a395720
- SHA512
  
  e3562164b306b0611637e1a5d59531b9f428fc6f7cc530d333f6b461da872a04c88dc12d290e6c8f5187b441e261da2f564fae9532b67147bb64101a5fba1207
- SSDEEP
  
  24576:aWdqE9Z1KhGep0m2Iz1HSLM22NC6QG63ENJA:aW4iaFpZeMHNCjP3
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation