Overview

overview

10

Static

static

3

0046aaa5b6...18.dll

windows7-x64

10

0046aaa5b6...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0046aaa5b6aab6b1080700199af4839b_JaffaCakes118

  • Size

    20KB

  • Sample

    240619-yxsbdatgjn

  • MD5

    0046aaa5b6aab6b1080700199af4839b

  • SHA1

    3774e084e8818eb99458b7b373c52f010de17807

  • SHA256

    7a47430127bdeb2c852b8d540ca722fd110e584b685e4c238c65eec6c31752d1

  • SHA512

    52f65a3f24965d4e0a12c61ff318950d17d53ec9fb19cc0d422e361874a31f3d3d63f2bf91e0346e1044daf72b627271d7a15e0c0e5df06daaa2fdfa984c009c

  • SSDEEP

    384:VoyVlNjtU2eSBImtbTwKFCUDDOxJpr7jKuxySTlezElKq+Y:VdVl3zVzMHjxJlOElKdY

Score
10/10
evasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      0046aaa5b6aab6b1080700199af4839b_JaffaCakes118

    • Size

      20KB

    • MD5

      0046aaa5b6aab6b1080700199af4839b

    • SHA1

      3774e084e8818eb99458b7b373c52f010de17807

    • SHA256

      7a47430127bdeb2c852b8d540ca722fd110e584b685e4c238c65eec6c31752d1

    • SHA512

      52f65a3f24965d4e0a12c61ff318950d17d53ec9fb19cc0d422e361874a31f3d3d63f2bf91e0346e1044daf72b627271d7a15e0c0e5df06daaa2fdfa984c009c

    • SSDEEP

      384:VoyVlNjtU2eSBImtbTwKFCUDDOxJpr7jKuxySTlezElKq+Y:VdVl3zVzMHjxJlOElKdY

    Score
    10/10
    evasionpersistenceprivilege_escalation

    • Modifies firewall policy service

      evasion

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks