273038baf4f5fef1d327eaf8c8d6c88153aac1f2700119ea016f8d3327303f78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af12d8b97800c5642fdd2e9a9543a80b_JaffaCakes118
Size

846KB
Sample

240820-ns2ddazbjb
MD5

af12d8b97800c5642fdd2e9a9543a80b
SHA1

e51d78805f3b6e068a02a45d6b56af841d4014fa
SHA256

273038baf4f5fef1d327eaf8c8d6c88153aac1f2700119ea016f8d3327303f78
SHA512

80b17f2413503e915bd076dd5e65cb4fe6b05188428ced2f65d5d89ccaf873631a2f4523ce210bb2724468fb8c4009712731ae94a8a25325e0abd9487ed5652f
SSDEEP

12288:rXdw4t6W0h2ctDdoi0Sw7dzH6n/30uCAM+RlPVo94ObuMtU9JdvE:rNz4hzMH7hq30uCAMGJsNtt0h

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  af12d8b97800c5642fdd2e9a9543a80b_JaffaCakes118
- Size
  
  846KB
- MD5
  
  af12d8b97800c5642fdd2e9a9543a80b
- SHA1
  
  e51d78805f3b6e068a02a45d6b56af841d4014fa
- SHA256
  
  273038baf4f5fef1d327eaf8c8d6c88153aac1f2700119ea016f8d3327303f78
- SHA512
  
  80b17f2413503e915bd076dd5e65cb4fe6b05188428ced2f65d5d89ccaf873631a2f4523ce210bb2724468fb8c4009712731ae94a8a25325e0abd9487ed5652f
- SSDEEP
  
  12288:rXdw4t6W0h2ctDdoi0Sw7dzH6n/30uCAM+RlPVo94ObuMtU9JdvE:rNz4hzMH7hq30uCAMGJsNtt0h
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation