2a2c96c5c06eb0c599b0fb47b33641426b6c63a6d2cf2b5e4ef014d7d1e48066 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

959a9abf6567a6bd8e60584ed65cd371_JaffaCakes118
Size

52KB
Sample

240814-lx64bawbka
MD5

959a9abf6567a6bd8e60584ed65cd371
SHA1

4b289a5e0732a1ddfcbb60d5b70299eb12ce4ffe
SHA256

2a2c96c5c06eb0c599b0fb47b33641426b6c63a6d2cf2b5e4ef014d7d1e48066
SHA512

1b952725fef60bb8d93aa444dea548b4febaca1b9dc60b346022b8e5ffb47710838ea1c34d56d196e6dc51071da014fe5bd98a38ffc4e31096b66c8545660336
SSDEEP

768:S6BnGDS779CqpixgAUlF7z9ve6E1sM4dnZ4tk:SrDG9/paRS1zg6E25dZ4tk

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  959a9abf6567a6bd8e60584ed65cd371_JaffaCakes118
- Size
  
  52KB
- MD5
  
  959a9abf6567a6bd8e60584ed65cd371
- SHA1
  
  4b289a5e0732a1ddfcbb60d5b70299eb12ce4ffe
- SHA256
  
  2a2c96c5c06eb0c599b0fb47b33641426b6c63a6d2cf2b5e4ef014d7d1e48066
- SHA512
  
  1b952725fef60bb8d93aa444dea548b4febaca1b9dc60b346022b8e5ffb47710838ea1c34d56d196e6dc51071da014fe5bd98a38ffc4e31096b66c8545660336
- SSDEEP
  
  768:S6BnGDS779CqpixgAUlF7z9ve6E1sM4dnZ4tk:SrDG9/paRS1zg6E25dZ4tk
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation