1843d0a590a5b37245dce3f65687f69ecbdad9694f863cfebdd61c542039044b | Triage

Sharing

General

Target

5a90dea6c71ba98c19e5d8e5a156b119_JaffaCakes118
Size

728KB
Sample

240719-fn4zpsxcnd
MD5

5a90dea6c71ba98c19e5d8e5a156b119
SHA1

dbf35795365d2046766d0efde8e63decf12d0b6a
SHA256

1843d0a590a5b37245dce3f65687f69ecbdad9694f863cfebdd61c542039044b
SHA512

50c6476cfc253a870f703726d9b635544f1287464b00b7d7a4cf72186c6cccc1724ae86274047e9526b01e2b76cea76c1c66952d6bd7b0ec15697631d32d5475
SSDEEP

12288:lEcF8D2K53tGcAOYYsLN2Z8bbX0/meGDgGeItoEc9GspWZhASRXHYnrm4:lEc8H5fMLN2Kb70rGlFtov9GsqRXHYrn

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  5a90dea6c71ba98c19e5d8e5a156b119_JaffaCakes118
- Size
  
  728KB
- MD5
  
  5a90dea6c71ba98c19e5d8e5a156b119
- SHA1
  
  dbf35795365d2046766d0efde8e63decf12d0b6a
- SHA256
  
  1843d0a590a5b37245dce3f65687f69ecbdad9694f863cfebdd61c542039044b
- SHA512
  
  50c6476cfc253a870f703726d9b635544f1287464b00b7d7a4cf72186c6cccc1724ae86274047e9526b01e2b76cea76c1c66952d6bd7b0ec15697631d32d5475
- SSDEEP
  
  12288:lEcF8D2K53tGcAOYYsLN2Z8bbX0/meGDgGeItoEc9GspWZhASRXHYnrm4:lEc8H5fMLN2Kb70rGlFtov9GsqRXHYrn
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation