53302114aae425475062a536e273e93f9d37bba871abd87ccaa1198aa61158a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cfca14029b34de5f9c600f2b5a49c05_JaffaCakes118
Size

92KB
Sample

240625-g2pbvaxenr
MD5

0cfca14029b34de5f9c600f2b5a49c05
SHA1

5befc28dfb4a3081d52d8756f420fac9761c3ba1
SHA256

53302114aae425475062a536e273e93f9d37bba871abd87ccaa1198aa61158a7
SHA512

d6525d3c758ac2bffbc9241ea4cd1de0225b46880cbfa165ab3b635e64b94e58009cb222a8dbd9a7add0510be5ff1b39c05155ed4204fbad45b79d5807890a10
SSDEEP

1536:t3dngMfc3ecn5WGalgLzY4KEP4gkYWovqCv8VAEhEacLfHwzGo:rJfc1n5V1zedUqCAyacszGo

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  0cfca14029b34de5f9c600f2b5a49c05_JaffaCakes118
- Size
  
  92KB
- MD5
  
  0cfca14029b34de5f9c600f2b5a49c05
- SHA1
  
  5befc28dfb4a3081d52d8756f420fac9761c3ba1
- SHA256
  
  53302114aae425475062a536e273e93f9d37bba871abd87ccaa1198aa61158a7
- SHA512
  
  d6525d3c758ac2bffbc9241ea4cd1de0225b46880cbfa165ab3b635e64b94e58009cb222a8dbd9a7add0510be5ff1b39c05155ed4204fbad45b79d5807890a10
- SSDEEP
  
  1536:t3dngMfc3ecn5WGalgLzY4KEP4gkYWovqCv8VAEhEacLfHwzGo:rJfc1n5V1zedUqCAyacszGo
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation