4fb3295034403f67fef7e9e7dcc667cca7d4d56eee86e12516c8420a92af20ba | Triage

Sharing

General

Target

db4d10e3d72a3b7bbfe92bf94632c7ff_JaffaCakes118
Size

383KB
Sample

240911-1zvkmavhpm
MD5

db4d10e3d72a3b7bbfe92bf94632c7ff
SHA1

5c0afb4148d88618d8fc500050aedb092e2371eb
SHA256

4fb3295034403f67fef7e9e7dcc667cca7d4d56eee86e12516c8420a92af20ba
SHA512

8ab9cbe7404f83fdd7ecbe28089f7d7bb2f5d207365596a7b051da2aa642ab183fa1c1bed77062ec14cfda6e8276e17b1557047753797cc27c6ea7ed42f36e1e
SSDEEP

6144:1IV6ota3f7kAZcNf2CIF25/yWOz/dtqC2+eKUGEvVQw2XH2lZDxfpl:msota3f7kAwzI6aWOJ/2+mL2XWXtv

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  db4d10e3d72a3b7bbfe92bf94632c7ff_JaffaCakes118
- Size
  
  383KB
- MD5
  
  db4d10e3d72a3b7bbfe92bf94632c7ff
- SHA1
  
  5c0afb4148d88618d8fc500050aedb092e2371eb
- SHA256
  
  4fb3295034403f67fef7e9e7dcc667cca7d4d56eee86e12516c8420a92af20ba
- SHA512
  
  8ab9cbe7404f83fdd7ecbe28089f7d7bb2f5d207365596a7b051da2aa642ab183fa1c1bed77062ec14cfda6e8276e17b1557047753797cc27c6ea7ed42f36e1e
- SSDEEP
  
  6144:1IV6ota3f7kAZcNf2CIF25/yWOz/dtqC2+eKUGEvVQw2XH2lZDxfpl:msota3f7kAwzI6aWOJ/2+mL2XWXtv
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation