b0759d78fb009a393e8102a65abd46b7517b01d59f0646ab7bcf3f978861671e | Triage

Sharing

General

Target

647e3b3ae2a5f18f6d5fecd0ba496fa2_JaffaCakes118
Size

728KB
Sample

240722-x6zw5stfla
MD5

647e3b3ae2a5f18f6d5fecd0ba496fa2
SHA1

210334076ed0e57a309c99397af5e9a0dc4955cb
SHA256

b0759d78fb009a393e8102a65abd46b7517b01d59f0646ab7bcf3f978861671e
SHA512

dc92ba448c8952b9ab8292e31bdff073a76595acef9ab854e069b82c8d1511d7626e770ff28cfbac34f569effaa408585be45863705ace4ae6e195783ced390a
SSDEEP

12288:lEcF8D2K53tGcAOYYsLN2Z8bbXl/meGDgGeItoEc9GspWZhASRXHYnrmK:lEc8H5fMLN2Kb7lrGlFtov9GsqRXHYr9

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  647e3b3ae2a5f18f6d5fecd0ba496fa2_JaffaCakes118
- Size
  
  728KB
- MD5
  
  647e3b3ae2a5f18f6d5fecd0ba496fa2
- SHA1
  
  210334076ed0e57a309c99397af5e9a0dc4955cb
- SHA256
  
  b0759d78fb009a393e8102a65abd46b7517b01d59f0646ab7bcf3f978861671e
- SHA512
  
  dc92ba448c8952b9ab8292e31bdff073a76595acef9ab854e069b82c8d1511d7626e770ff28cfbac34f569effaa408585be45863705ace4ae6e195783ced390a
- SSDEEP
  
  12288:lEcF8D2K53tGcAOYYsLN2Z8bbXl/meGDgGeItoEc9GspWZhASRXHYnrmK:lEc8H5fMLN2Kb7lrGlFtov9GsqRXHYr9
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation