ade5254516e6c0a030b8f48ffb51ca5398bdfa14ab4a6acc2989d6ec9844e956 | Triage

Sharing

General

Target

0fd90e84fa56bc781868f9c6dd567fc7_JaffaCakes118
Size

181KB
Sample

240625-2zjnssyfrh
MD5

0fd90e84fa56bc781868f9c6dd567fc7
SHA1

abef381cbd2b3aabf1150ed6984a49a61d05a49e
SHA256

ade5254516e6c0a030b8f48ffb51ca5398bdfa14ab4a6acc2989d6ec9844e956
SHA512

88a4ee541e818e18adc74cd64394a57254125fc2fb01e3d1ad643a807ea8b1d4935da6ecb1acbfc74b010cd4d24a8dfbef7a125f1b53e525a49afc18ab1ed813
SSDEEP

1536:X5LnbKjp2Lvu9v8iFXItzM63a/jp20q7c88dSaR5AI988af95p1Xmsoew/lDtW:JLbKjoLvgv8KSQ+g203S25Kd1Wsovto

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  0fd90e84fa56bc781868f9c6dd567fc7_JaffaCakes118
- Size
  
  181KB
- MD5
  
  0fd90e84fa56bc781868f9c6dd567fc7
- SHA1
  
  abef381cbd2b3aabf1150ed6984a49a61d05a49e
- SHA256
  
  ade5254516e6c0a030b8f48ffb51ca5398bdfa14ab4a6acc2989d6ec9844e956
- SHA512
  
  88a4ee541e818e18adc74cd64394a57254125fc2fb01e3d1ad643a807ea8b1d4935da6ecb1acbfc74b010cd4d24a8dfbef7a125f1b53e525a49afc18ab1ed813
- SSDEEP
  
  1536:X5LnbKjp2Lvu9v8iFXItzM63a/jp20q7c88dSaR5AI988af95p1Xmsoew/lDtW:JLbKjoLvgv8KSQ+g203S25Kd1Wsovto
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation