b7ff698946e34b42a6b46e75e5f8092c947442e2e74f64aa59d0796f85714eb3 | Triage

Sharing

General

Target

48aa0a75e86f9436fb00e7d040365344_JaffaCakes118
Size

728KB
Sample

240715-hjmkzawdmh
MD5

48aa0a75e86f9436fb00e7d040365344
SHA1

f2f116b0cafdcaed121072d54a2fb18b56d39518
SHA256

b7ff698946e34b42a6b46e75e5f8092c947442e2e74f64aa59d0796f85714eb3
SHA512

bf9b6ff234c641f3d2051d7eb0543ede4975a8edc12e22e3d176f4eb3eaabd4d62ab232049b479cd2a6ccbb13381de54814d74ccaeed671561a3fc6591c340e8
SSDEEP

12288:lEcF8D2K53tGcAOYYsLN2Z8bbX1/meGDgGeItoEc9GspWZhASRXHYnrmK:lEc8H5fMLN2Kb71rGlFtov9GsqRXHYrV

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  48aa0a75e86f9436fb00e7d040365344_JaffaCakes118
- Size
  
  728KB
- MD5
  
  48aa0a75e86f9436fb00e7d040365344
- SHA1
  
  f2f116b0cafdcaed121072d54a2fb18b56d39518
- SHA256
  
  b7ff698946e34b42a6b46e75e5f8092c947442e2e74f64aa59d0796f85714eb3
- SHA512
  
  bf9b6ff234c641f3d2051d7eb0543ede4975a8edc12e22e3d176f4eb3eaabd4d62ab232049b479cd2a6ccbb13381de54814d74ccaeed671561a3fc6591c340e8
- SSDEEP
  
  12288:lEcF8D2K53tGcAOYYsLN2Z8bbX1/meGDgGeItoEc9GspWZhASRXHYnrmK:lEc8H5fMLN2Kb71rGlFtov9GsqRXHYrV
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation