General
-
Target
366349ba69f9f52fcc2c3d72c54776bd_JaffaCakes118
-
Size
167KB
-
Sample
240710-zyyefssejc
-
MD5
366349ba69f9f52fcc2c3d72c54776bd
-
SHA1
6475c5ef843ec918c339b72610948612920b866a
-
SHA256
a04f9d4e9f37dcf8ee7893c10ca57d3daa79ead5fd89addfd3bbff1211cd461e
-
SHA512
676bbde196d7063bcb32b72df498a89df3a6473fd269fdb7b516e9104a8828fdb8c17d51e71e1b2aec7c3201beba6d74244046648f01b5e3cd4d9c28be0bd9ac
-
SSDEEP
3072:/NQKPWDyWI0jMfLlICNQ3PFMRCxyLiFEw4lKDk7X6fgOBAzzufzJreD+Mq66PNgy:/NSDyWIQMjlXNhRCk2N4g+X+iw9Oq661
Static task
static1
Behavioral task
behavioral1
Sample
366349ba69f9f52fcc2c3d72c54776bd_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
366349ba69f9f52fcc2c3d72c54776bd_JaffaCakes118
-
Size
167KB
-
MD5
366349ba69f9f52fcc2c3d72c54776bd
-
SHA1
6475c5ef843ec918c339b72610948612920b866a
-
SHA256
a04f9d4e9f37dcf8ee7893c10ca57d3daa79ead5fd89addfd3bbff1211cd461e
-
SHA512
676bbde196d7063bcb32b72df498a89df3a6473fd269fdb7b516e9104a8828fdb8c17d51e71e1b2aec7c3201beba6d74244046648f01b5e3cd4d9c28be0bd9ac
-
SSDEEP
3072:/NQKPWDyWI0jMfLlICNQ3PFMRCxyLiFEw4lKDk7X6fgOBAzzufzJreD+Mq66PNgy:/NSDyWIQMjlXNhRCk2N4g+X+iw9Oq661
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1