52517d8ce45dffa2f5b20e560e3119f0bb95a02d730b8d00052b171bde248819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

865f37bbbd98c299908727d68ccd8a68_JaffaCakes118
Size

200KB
Sample

240810-rjg5xssgmm
MD5

865f37bbbd98c299908727d68ccd8a68
SHA1

d982c4b8ac06cdee20c6df43385524456adb6a6e
SHA256

52517d8ce45dffa2f5b20e560e3119f0bb95a02d730b8d00052b171bde248819
SHA512

7fe2f95ceb2bfeb21bdd03f4bf13585805ac8af440c2f2291bf90c75c13fb6de17c515fba4e18e8d9754d44bd116f74e7cfbd2499c7eebb4e7862930d89cfa33
SSDEEP

6144:LEDxE87O4a/DvVqfISvnvUjJGPhLGXD3aO5g1b:2e81Av7SvnvyJDXD3aO5g1b

Score

8^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  865f37bbbd98c299908727d68ccd8a68_JaffaCakes118
- Size
  
  200KB
- MD5
  
  865f37bbbd98c299908727d68ccd8a68
- SHA1
  
  d982c4b8ac06cdee20c6df43385524456adb6a6e
- SHA256
  
  52517d8ce45dffa2f5b20e560e3119f0bb95a02d730b8d00052b171bde248819
- SHA512
  
  7fe2f95ceb2bfeb21bdd03f4bf13585805ac8af440c2f2291bf90c75c13fb6de17c515fba4e18e8d9754d44bd116f74e7cfbd2499c7eebb4e7862930d89cfa33
- SSDEEP
  
  6144:LEDxE87O4a/DvVqfISvnvUjJGPhLGXD3aO5g1b:2e81Av7SvnvyJDXD3aO5g1b
Score

8^/10

discovery evasion persistence privilege_escalation trojan
- Modifies Windows Firewall
  evasion
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan