5c3e5a5c9f40ca55090b80ab4dda0d97c01e6f7e779494af19e5da10112f1f74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3780eba7c8395fd0ef25226e2e0f1aa1_JaffaCakes118
Size

94KB
Sample

240711-ds5exsydlc
MD5

3780eba7c8395fd0ef25226e2e0f1aa1
SHA1

428422d6d8c5ff2b118e2dc8f3c39d70372b5b39
SHA256

5c3e5a5c9f40ca55090b80ab4dda0d97c01e6f7e779494af19e5da10112f1f74
SHA512

8fc3c9ffe6a8010372249ae7a28d4d5218289f1d9925f189d62714a1ed99a0ff05d00eadc39ad8211e746b5676e83c0f83ac3a35f808972d2a2daf4e34238ce9
SSDEEP

1536:xmSGaTXgqjNMzZfzTTDBjRRDLhkdX1TyN/Of23etb213V2Skh+kq9JBz6VXYSJ5n:gS5TV2pD9laXCc23eY13V2SkEBzyOGO6

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  3780eba7c8395fd0ef25226e2e0f1aa1_JaffaCakes118
- Size
  
  94KB
- MD5
  
  3780eba7c8395fd0ef25226e2e0f1aa1
- SHA1
  
  428422d6d8c5ff2b118e2dc8f3c39d70372b5b39
- SHA256
  
  5c3e5a5c9f40ca55090b80ab4dda0d97c01e6f7e779494af19e5da10112f1f74
- SHA512
  
  8fc3c9ffe6a8010372249ae7a28d4d5218289f1d9925f189d62714a1ed99a0ff05d00eadc39ad8211e746b5676e83c0f83ac3a35f808972d2a2daf4e34238ce9
- SSDEEP
  
  1536:xmSGaTXgqjNMzZfzTTDBjRRDLhkdX1TyN/Of23etb213V2Skh+kq9JBz6VXYSJ5n:gS5TV2pD9laXCc23eY13V2SkEBzyOGO6
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation