5375eec1935bf551748def474fa2d933f8cb0651200adf3babe89c47da8ee57e | Triage

Sharing

General

Target

ed31bb85f6170a70393deb78b3d904c3_JaffaCakes118
Size

78KB
Sample

240920-j9tyeaxejn
MD5

ed31bb85f6170a70393deb78b3d904c3
SHA1

6d17ff5ab6178f2b47074bc2b563bfa08bb992ce
SHA256

5375eec1935bf551748def474fa2d933f8cb0651200adf3babe89c47da8ee57e
SHA512

2c8485f9837fe5126bf000c9e462459c7e4fa8c1eceaa926528a501cd76f57e44bbdb7bd302b48c56da98d11776c8a086074bd451e80f808792a34fb17ebadfd
SSDEEP

1536:8Fa5WBIAXkzOt9FnWZLrrRQFmhWPONL8VA2wZSM7e:8s5ta9F2MiL8VA28S3

Score

10^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  ed31bb85f6170a70393deb78b3d904c3_JaffaCakes118
- Size
  
  78KB
- MD5
  
  ed31bb85f6170a70393deb78b3d904c3
- SHA1
  
  6d17ff5ab6178f2b47074bc2b563bfa08bb992ce
- SHA256
  
  5375eec1935bf551748def474fa2d933f8cb0651200adf3babe89c47da8ee57e
- SHA512
  
  2c8485f9837fe5126bf000c9e462459c7e4fa8c1eceaa926528a501cd76f57e44bbdb7bd302b48c56da98d11776c8a086074bd451e80f808792a34fb17ebadfd
- SSDEEP
  
  1536:8Fa5WBIAXkzOt9FnWZLrrRQFmhWPONL8VA2wZSM7e:8s5ta9F2MiL8VA28S3
Score

10^/10

discovery evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation