d655eda074802997b41c2bbf518b73b709c4de213a42225a609eb02d95567e7d | Triage

Sharing

General

Target

3ea9d2915fe87361ec3c4a305084a4d3_JaffaCakes118
Size

988KB
Sample

241013-jqz1bazfrk
MD5

3ea9d2915fe87361ec3c4a305084a4d3
SHA1

8e3be83108c7c3c0e05797b269a76298e44ca883
SHA256

d655eda074802997b41c2bbf518b73b709c4de213a42225a609eb02d95567e7d
SHA512

f96c3713ffa22db56d7d5401a91791e18629d3014b97e8081d093060f8dcecdf9c28abeaf1619f782a56666e7dba668c5a7625369859c9816365bfc0a454e433
SSDEEP

24576:I+PnjrSgDW8ZOWp6SY6rXvC2WwDEhkdYFsj:hnj9W88jAracqCj

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  3ea9d2915fe87361ec3c4a305084a4d3_JaffaCakes118
- Size
  
  988KB
- MD5
  
  3ea9d2915fe87361ec3c4a305084a4d3
- SHA1
  
  8e3be83108c7c3c0e05797b269a76298e44ca883
- SHA256
  
  d655eda074802997b41c2bbf518b73b709c4de213a42225a609eb02d95567e7d
- SHA512
  
  f96c3713ffa22db56d7d5401a91791e18629d3014b97e8081d093060f8dcecdf9c28abeaf1619f782a56666e7dba668c5a7625369859c9816365bfc0a454e433
- SSDEEP
  
  24576:I+PnjrSgDW8ZOWp6SY6rXvC2WwDEhkdYFsj:hnj9W88jAracqCj
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation