55d9e99a917d3e70093d7ae6894419f28e0d5900842ba208475c9cccf13ba846 | Triage

Sharing

General

Target

3e5948c5b9d205d82b7206b0972685dc_JaffaCakes118
Size

728KB
Sample

240712-wrt7nswhjc
MD5

3e5948c5b9d205d82b7206b0972685dc
SHA1

0edf5d33381381fb0c69b1df9ec0c8ebeedfc0da
SHA256

55d9e99a917d3e70093d7ae6894419f28e0d5900842ba208475c9cccf13ba846
SHA512

292716effba65b446631d129da0e49095028d10a4edd99f821aae2fe928c82a183ec704ab813c5e06db63932ad83b988d7c7c69277698649a1551da607061de3
SSDEEP

12288:lEcF8D2K53tGcAOYYsLN2Z8bbXp/meGDgGeItoEc9GspWZhASRXHYnrmL:lEc8H5fMLN2Kb7prGlFtov9GsqRXHYrc

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  3e5948c5b9d205d82b7206b0972685dc_JaffaCakes118
- Size
  
  728KB
- MD5
  
  3e5948c5b9d205d82b7206b0972685dc
- SHA1
  
  0edf5d33381381fb0c69b1df9ec0c8ebeedfc0da
- SHA256
  
  55d9e99a917d3e70093d7ae6894419f28e0d5900842ba208475c9cccf13ba846
- SHA512
  
  292716effba65b446631d129da0e49095028d10a4edd99f821aae2fe928c82a183ec704ab813c5e06db63932ad83b988d7c7c69277698649a1551da607061de3
- SSDEEP
  
  12288:lEcF8D2K53tGcAOYYsLN2Z8bbXp/meGDgGeItoEc9GspWZhASRXHYnrmL:lEc8H5fMLN2Kb7prGlFtov9GsqRXHYrc
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation