2db1acf9d2128a9b9b48b04a707f7c40ce15ad9d309803f3e1b9e4ac0cfda790 | Triage

Sharing

General

Target

8c9acb89f44abb5641c2d86ee41bec0a_JaffaCakes118
Size

28KB
Sample

240812-atnxsa1cqa
MD5

8c9acb89f44abb5641c2d86ee41bec0a
SHA1

ec7c8481a5566ffb57f12be8c50fc087594ec924
SHA256

2db1acf9d2128a9b9b48b04a707f7c40ce15ad9d309803f3e1b9e4ac0cfda790
SHA512

bf4b182847691434827fc8c8eaa389b50a32af491586e13333a124c3053498f23f681e585d3706ed39e3d1346c85e0a06bb2d8c7ab9f2d64fca7746894c70afa
SSDEEP

384:/xA2OFb3GXldJERr3P1gg/L9Risn/a60TcPnTkETDy3hZo7ZH1upGLAaUegiAjP9:WnyAn7nC63Q3bGUQsPaCB

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  8c9acb89f44abb5641c2d86ee41bec0a_JaffaCakes118
- Size
  
  28KB
- MD5
  
  8c9acb89f44abb5641c2d86ee41bec0a
- SHA1
  
  ec7c8481a5566ffb57f12be8c50fc087594ec924
- SHA256
  
  2db1acf9d2128a9b9b48b04a707f7c40ce15ad9d309803f3e1b9e4ac0cfda790
- SHA512
  
  bf4b182847691434827fc8c8eaa389b50a32af491586e13333a124c3053498f23f681e585d3706ed39e3d1346c85e0a06bb2d8c7ab9f2d64fca7746894c70afa
- SSDEEP
  
  384:/xA2OFb3GXldJERr3P1gg/L9Risn/a60TcPnTkETDy3hZo7ZH1upGLAaUegiAjP9:WnyAn7nC63Q3bGUQsPaCB
Score

8^/10

discovery evasion persistence privilege_escalation
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalation