3e7f2221cc75e6350cb3421ab90525554a28a6576822f0d33f47e145213219cf | Triage

Sharing

General

Target

f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118
Size

15KB
Sample

240921-wkla7awbpm
MD5

f05836f696d0783cc94b81b0ce2aa005
SHA1

8da00a39b0277eb329fd1b600d07c991e23f7197
SHA256

3e7f2221cc75e6350cb3421ab90525554a28a6576822f0d33f47e145213219cf
SHA512

ac6663be1c8946c9792c0538783c436aaeab84fa98e2c87177db52cd0873f19fb72b396ce3fb6c26e90d95593ce1228ecf6bca03b51dd9164e37fef5607b0fd5
SSDEEP

192:lCgb5ORR59fZFs1SaRDWb0RsjEFAJc7nH62z9FaJjRnS1nR/sgIjPt32EmAPGE8:lTesYatWb0RESniRneD+IA3

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118
- Size
  
  15KB
- MD5
  
  f05836f696d0783cc94b81b0ce2aa005
- SHA1
  
  8da00a39b0277eb329fd1b600d07c991e23f7197
- SHA256
  
  3e7f2221cc75e6350cb3421ab90525554a28a6576822f0d33f47e145213219cf
- SHA512
  
  ac6663be1c8946c9792c0538783c436aaeab84fa98e2c87177db52cd0873f19fb72b396ce3fb6c26e90d95593ce1228ecf6bca03b51dd9164e37fef5607b0fd5
- SSDEEP
  
  192:lCgb5ORR59fZFs1SaRDWb0RsjEFAJc7nH62z9FaJjRnS1nR/sgIjPt32EmAPGE8:lTesYatWb0RESniRneD+IA3
Score

8^/10

discovery evasion persistence privilege_escalation
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalation