Overview

overview

8

Static

static

3

0b22f0360f...18.exe

windows7-x64

0b22f0360f...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b22f0360f19290790d58d6f96f6d852_JaffaCakes118

  • Size

    100KB

  • Sample

    240624-21zfmszerq

  • MD5

    0b22f0360f19290790d58d6f96f6d852

  • SHA1

    2d249056c3da123d158d645aad98784a74682fe5

  • SHA256

    bd49b3dfb09b05eeca38ccf2172470b7d5089fe2cdf9562efa8f8e82d59d5c35

  • SHA512

    c8561e01174c3b5c0e5db66a57d24a946487df1b81149249699a49538fa4c75f1ad58d1ee99ee67ba67f06264fcb7bef1b622444e9fb68bf11c85a7cfc3a617f

  • SSDEEP

    1536:R43LG6yZ29aADOQ1vliepxZGMvaAQkv157/lvykTw5Rgo70HYRIA:RObaSOQ1vIhMtDvvbtykTsRgo7kY

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      0b22f0360f19290790d58d6f96f6d852_JaffaCakes118

    • Size

      100KB

    • MD5

      0b22f0360f19290790d58d6f96f6d852

    • SHA1

      2d249056c3da123d158d645aad98784a74682fe5

    • SHA256

      bd49b3dfb09b05eeca38ccf2172470b7d5089fe2cdf9562efa8f8e82d59d5c35

    • SHA512

      c8561e01174c3b5c0e5db66a57d24a946487df1b81149249699a49538fa4c75f1ad58d1ee99ee67ba67f06264fcb7bef1b622444e9fb68bf11c85a7cfc3a617f

    • SSDEEP

      1536:R43LG6yZ29aADOQ1vliepxZGMvaAQkv157/lvykTw5Rgo70HYRIA:RObaSOQ1vIhMtDvvbtykTsRgo7kY

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks