ad3c997fea4347b5bf763f478e4d5fa5e4d5f2729ce08c710abccbae855add67 | Triage

Sharing

General

Target

47f77dbd05a58bf75228485f7989e73a_JaffaCakes118
Size

36KB
Sample

240715-dp6htavgqm
MD5

47f77dbd05a58bf75228485f7989e73a
SHA1

2e16c04fe6cc04779128d80a3214e7956d5c0828
SHA256

ad3c997fea4347b5bf763f478e4d5fa5e4d5f2729ce08c710abccbae855add67
SHA512

b20a40211fc0e5332b7651d65b0acde0c8b0383f5c2206a701d3ca52d1cd7cdcb745692ac4a3cdef7b0f0a101a701450d1c7fe3a04b6e12b390128c3c2a4d3ea
SSDEEP

768:Zhl/xisOVKMEW2ICHcvX6OcuC1eKTKdGhqWkVFGCufmJ8EHK9R3Y:Zhl/xtOVKU2wdQKdGA8xfAq9Ro

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  47f77dbd05a58bf75228485f7989e73a_JaffaCakes118
- Size
  
  36KB
- MD5
  
  47f77dbd05a58bf75228485f7989e73a
- SHA1
  
  2e16c04fe6cc04779128d80a3214e7956d5c0828
- SHA256
  
  ad3c997fea4347b5bf763f478e4d5fa5e4d5f2729ce08c710abccbae855add67
- SHA512
  
  b20a40211fc0e5332b7651d65b0acde0c8b0383f5c2206a701d3ca52d1cd7cdcb745692ac4a3cdef7b0f0a101a701450d1c7fe3a04b6e12b390128c3c2a4d3ea
- SSDEEP
  
  768:Zhl/xisOVKMEW2ICHcvX6OcuC1eKTKdGhqWkVFGCufmJ8EHK9R3Y:Zhl/xtOVKU2wdQKdGA8xfAq9Ro
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation