0f007a2ae28a7ed10f7443f4fc1f68c0ca599a4ca21f8595fd02543e644e4987 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

071a067c1e3c2ea2987008135c3432b1_JaffaCakes118
Size

100KB
Sample

240624-hx5npstbqp
MD5

071a067c1e3c2ea2987008135c3432b1
SHA1

aa35e537db0e1b0869e896cdbef29240b673a395
SHA256

0f007a2ae28a7ed10f7443f4fc1f68c0ca599a4ca21f8595fd02543e644e4987
SHA512

653ae2e158b20e652add47b2007f8cd3ed2a99f1616dc0fd27df34c119cae5fc2ea66a26edb88f53999080e5552026f5a195f5028bd5afefa498a2bfcea3a05a
SSDEEP

1536:jwflMfUEcuTWL7QqbZIEtE0ZVAanFnp5IGojDhH1MyDXLHoXSSSeSSS+y:wlFruI7BbntE0ZV7nFp58t17rLHof

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  071a067c1e3c2ea2987008135c3432b1_JaffaCakes118
- Size
  
  100KB
- MD5
  
  071a067c1e3c2ea2987008135c3432b1
- SHA1
  
  aa35e537db0e1b0869e896cdbef29240b673a395
- SHA256
  
  0f007a2ae28a7ed10f7443f4fc1f68c0ca599a4ca21f8595fd02543e644e4987
- SHA512
  
  653ae2e158b20e652add47b2007f8cd3ed2a99f1616dc0fd27df34c119cae5fc2ea66a26edb88f53999080e5552026f5a195f5028bd5afefa498a2bfcea3a05a
- SSDEEP
  
  1536:jwflMfUEcuTWL7QqbZIEtE0ZVAanFnp5IGojDhH1MyDXLHoXSSSeSSS+y:wlFruI7BbntE0ZV7nFp58t17rLHof
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation