0b7ccdfb0e2b050c459d21e01acef56101860df4e513a1a0d90593fd8cd08490 | Triage

Sharing

General

Target

de560ddab42429a2b2788880d841eede_JaffaCakes118
Size

15KB
Sample

240913-qg6vtssfjd
MD5

de560ddab42429a2b2788880d841eede
SHA1

07c91f4f544ce7a92599c8c3ff7f0c42618c8d47
SHA256

0b7ccdfb0e2b050c459d21e01acef56101860df4e513a1a0d90593fd8cd08490
SHA512

9da2283d4d653d0f357fed51b3547deaea08f78b61ce4da835800cdafb12647cb665e806e21087872c2f350f3fa92be20fb98d745f466d3cfebcb3a6c45cdd4e
SSDEEP

192:77Vcb9Asny6YyVNtrj+818vCziI4QJulQLFpLdH4+1swnaWr4Cf:776GsjF9SwiIPJXNx1swnaWrr

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  de560ddab42429a2b2788880d841eede_JaffaCakes118
- Size
  
  15KB
- MD5
  
  de560ddab42429a2b2788880d841eede
- SHA1
  
  07c91f4f544ce7a92599c8c3ff7f0c42618c8d47
- SHA256
  
  0b7ccdfb0e2b050c459d21e01acef56101860df4e513a1a0d90593fd8cd08490
- SHA512
  
  9da2283d4d653d0f357fed51b3547deaea08f78b61ce4da835800cdafb12647cb665e806e21087872c2f350f3fa92be20fb98d745f466d3cfebcb3a6c45cdd4e
- SSDEEP
  
  192:77Vcb9Asny6YyVNtrj+818vCziI4QJulQLFpLdH4+1swnaWr4Cf:776GsjF9SwiIPJXNx1swnaWrr
Score

8^/10

discovery evasion persistence privilege_escalation
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalation