2fc9aebfecfa34329a777a122cc82b7e4b8f3aa3d1879b69a7329edd52cdf5d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

834f9cb7966b30e5d57d6087fae029eb_JaffaCakes118
Size

269KB
Sample

240802-gv5egszekm
MD5

834f9cb7966b30e5d57d6087fae029eb
SHA1

f50180d1849cc06ea8c6cc24d78c2e46fe343970
SHA256

2fc9aebfecfa34329a777a122cc82b7e4b8f3aa3d1879b69a7329edd52cdf5d8
SHA512

973aac69cf148318c4367b8e383c0663323f99a0cb97edaccccae6b254d6f7c9fb64a1fa6c146878170a4bbad011b3628e49669cba68c773f3ec259c829fc441
SSDEEP

6144:ZN8kT3yQs3HrltpLZAkQOeEEyhgPva/BZ2kiDNzNeNc2Q:j8SyQsZZj+xva/BZkxxQ1Q

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  834f9cb7966b30e5d57d6087fae029eb_JaffaCakes118
- Size
  
  269KB
- MD5
  
  834f9cb7966b30e5d57d6087fae029eb
- SHA1
  
  f50180d1849cc06ea8c6cc24d78c2e46fe343970
- SHA256
  
  2fc9aebfecfa34329a777a122cc82b7e4b8f3aa3d1879b69a7329edd52cdf5d8
- SHA512
  
  973aac69cf148318c4367b8e383c0663323f99a0cb97edaccccae6b254d6f7c9fb64a1fa6c146878170a4bbad011b3628e49669cba68c773f3ec259c829fc441
- SSDEEP
  
  6144:ZN8kT3yQs3HrltpLZAkQOeEEyhgPva/BZ2kiDNzNeNc2Q:j8SyQsZZj+xva/BZkxxQ1Q
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation