35f7f4b3c8d3caa5464f325a6b6c191155015e05955b06de009b864717d5813c | Triage

Sharing

General

Target

002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118
Size

21KB
Sample

240619-ycql2sycqg
MD5

002d326c9e5754eae04b9a828c2acfaa
SHA1

ebc2b82920977303f86f172e463b32e3196cff2e
SHA256

35f7f4b3c8d3caa5464f325a6b6c191155015e05955b06de009b864717d5813c
SHA512

3fc0982c2f7e347b8cff4c631ad7e3a6517b0e3f1e01cf290314270b25c951d66f31a50d0845ceee178e413c423ea60eec771cff6f16e920ffd1c3a8c25131c0
SSDEEP

384:82pdNjtU2Oy6rsuSd6G2As/ARRTCVUkl7GE3gjEm/nTzwNvVQW6v:82pdrrX2RMR+VUkxGE3QLnvwNvy

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118
- Size
  
  21KB
- MD5
  
  002d326c9e5754eae04b9a828c2acfaa
- SHA1
  
  ebc2b82920977303f86f172e463b32e3196cff2e
- SHA256
  
  35f7f4b3c8d3caa5464f325a6b6c191155015e05955b06de009b864717d5813c
- SHA512
  
  3fc0982c2f7e347b8cff4c631ad7e3a6517b0e3f1e01cf290314270b25c951d66f31a50d0845ceee178e413c423ea60eec771cff6f16e920ffd1c3a8c25131c0
- SSDEEP
  
  384:82pdNjtU2Oy6rsuSd6G2As/ARRTCVUkl7GE3gjEm/nTzwNvVQW6v:82pdrrX2RMR+VUkxGE3QLnvwNvy
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

persistenceprivilege_escalation