dccd8993825e8f971a3e8b5f8a65bbe122078dfe61b4a11bc07ed4e529db3e3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ff56f0876468075eca21667aa167d4_JaffaCakes118
Size

9KB
Sample

241004-mpymmstdlf
MD5

12ff56f0876468075eca21667aa167d4
SHA1

ba2b71ea6aee9901868a03d28d2cc01ca3ae3822
SHA256

dccd8993825e8f971a3e8b5f8a65bbe122078dfe61b4a11bc07ed4e529db3e3e
SHA512

57d04f768840b2f959bb63ec3cecb3d3be41c19e35cd579a527717fff42dac0b8969e3bc690a2ae3919931fc317f2ccb4cae2b363392be5fcb202d51c861432b
SSDEEP

192:kK2HaesRcUeLN7/GrU/CAlPEfpppppppppppppppppppppppppppppog6MLu9ppP:Jk6S7/GrU/CsPEiKlpVYneZDVlACGnL

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  12ff56f0876468075eca21667aa167d4_JaffaCakes118
- Size
  
  9KB
- MD5
  
  12ff56f0876468075eca21667aa167d4
- SHA1
  
  ba2b71ea6aee9901868a03d28d2cc01ca3ae3822
- SHA256
  
  dccd8993825e8f971a3e8b5f8a65bbe122078dfe61b4a11bc07ed4e529db3e3e
- SHA512
  
  57d04f768840b2f959bb63ec3cecb3d3be41c19e35cd579a527717fff42dac0b8969e3bc690a2ae3919931fc317f2ccb4cae2b363392be5fcb202d51c861432b
- SSDEEP
  
  192:kK2HaesRcUeLN7/GrU/CAlPEfpppppppppppppppppppppppppppppog6MLu9ppP:Jk6S7/GrU/CsPEiKlpVYneZDVlACGnL
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalation