d4235c1603e10f7b2876114d18cfcd590c612141662f4ea53721cef2839533da | Triage

Sharing

General

Target

0e7f473a640b596415c01375739c356e_JaffaCakes118
Size

100KB
Sample

240625-sdbxdswgpc
MD5

0e7f473a640b596415c01375739c356e
SHA1

97beb75e5a6a223ed4c8d937838f5cde627589bd
SHA256

d4235c1603e10f7b2876114d18cfcd590c612141662f4ea53721cef2839533da
SHA512

5540e3938435b728577dd1e2c8b8d596e0604516c9d5cce3926b88edc334f5b8ac7267bc053dc42cb347187a426267d66453239e37961d969aa9efafe091fd0a
SSDEEP

3072:JgrwDH6CZtRfrg7ZCmrlmaYY9Wqfgo2Y:SwT6CZtRzg7LrD79W7Y

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  0e7f473a640b596415c01375739c356e_JaffaCakes118
- Size
  
  100KB
- MD5
  
  0e7f473a640b596415c01375739c356e
- SHA1
  
  97beb75e5a6a223ed4c8d937838f5cde627589bd
- SHA256
  
  d4235c1603e10f7b2876114d18cfcd590c612141662f4ea53721cef2839533da
- SHA512
  
  5540e3938435b728577dd1e2c8b8d596e0604516c9d5cce3926b88edc334f5b8ac7267bc053dc42cb347187a426267d66453239e37961d969aa9efafe091fd0a
- SSDEEP
  
  3072:JgrwDH6CZtRfrg7ZCmrlmaYY9Wqfgo2Y:SwT6CZtRzg7LrD79W7Y
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation