Overview

overview

8

Static

static

3

0e00c13c7a...18.dll

windows7-x64

8

0e00c13c7a...18.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e00c13c7a43211e5fabf7c2a223f7ae_JaffaCakes118

  • Size

    20KB

  • Sample

    240625-n88gmaydlc

  • MD5

    0e00c13c7a43211e5fabf7c2a223f7ae

  • SHA1

    7edb05bf4c935258a5d054d31b8f9ae71d3c6c0d

  • SHA256

    983cf0a0c21ac5dc9a6f718a9cf349b3dbe39535ad163105d43d29d951bbd8ee

  • SHA512

    c5a61549ca342bc98036755e7fdba7da81053d3ba9bdb427e09fd283cb2fd8878f5776e9b8302f938a522eb8c25d889c897b4360f4ed38beaf6193c1166903e0

  • SSDEEP

    24:eH1GStnfJCAbpPZYtaBNUlpcgrp/teV2EQLqoVwFbQjFcQES0C:ytnhCuZoOUl3r9ksFMb6yrS

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      0e00c13c7a43211e5fabf7c2a223f7ae_JaffaCakes118

    • Size

      20KB

    • MD5

      0e00c13c7a43211e5fabf7c2a223f7ae

    • SHA1

      7edb05bf4c935258a5d054d31b8f9ae71d3c6c0d

    • SHA256

      983cf0a0c21ac5dc9a6f718a9cf349b3dbe39535ad163105d43d29d951bbd8ee

    • SHA512

      c5a61549ca342bc98036755e7fdba7da81053d3ba9bdb427e09fd283cb2fd8878f5776e9b8302f938a522eb8c25d889c897b4360f4ed38beaf6193c1166903e0

    • SSDEEP

      24:eH1GStnfJCAbpPZYtaBNUlpcgrp/teV2EQLqoVwFbQjFcQES0C:ytnhCuZoOUl3r9ksFMb6yrS

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks