General
-
Target
1551609732c061e08bdf8b0085d547be_JaffaCakes118
-
Size
172KB
-
Sample
241004-3j4jpsxaqf
-
MD5
1551609732c061e08bdf8b0085d547be
-
SHA1
947cad2d3e1d7eeac454db98581069bbf12f9179
-
SHA256
e2277f1336c11d78106a6bab6d179af5a99cce1c11a7ab19283b58305726c82c
-
SHA512
131096e7956c7b738abb3f054fad75e6d4985625f427ff368201be793340351ad7f0ad637915197b4c56cac3d88f1aa480be3152a2bd5d06d1e9278f4988ffa2
-
SSDEEP
3072:8kVD1BSqao9c3HwsanTdgyOxsP+f+lyDyFDVwnuqLEWj1AVAk2EUXW4:JSqjc3HsTaxoq/J3LEWj1MPUXW4
Static task
static1
Behavioral task
behavioral1
Sample
1551609732c061e08bdf8b0085d547be_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
1551609732c061e08bdf8b0085d547be_JaffaCakes118
-
Size
172KB
-
MD5
1551609732c061e08bdf8b0085d547be
-
SHA1
947cad2d3e1d7eeac454db98581069bbf12f9179
-
SHA256
e2277f1336c11d78106a6bab6d179af5a99cce1c11a7ab19283b58305726c82c
-
SHA512
131096e7956c7b738abb3f054fad75e6d4985625f427ff368201be793340351ad7f0ad637915197b4c56cac3d88f1aa480be3152a2bd5d06d1e9278f4988ffa2
-
SSDEEP
3072:8kVD1BSqao9c3HwsanTdgyOxsP+f+lyDyFDVwnuqLEWj1AVAk2EUXW4:JSqjc3HsTaxoq/J3LEWj1MPUXW4
-
Modifies firewall policy service
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5