Overview

overview

8

Static

static

3

0ed0a53786...18.exe

windows7-x64

0ed0a53786...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ed0a53786dff4b1dd36e70c6cef4bcf_JaffaCakes118

  • Size

    124KB

  • Sample

    240625-vbters1gjd

  • MD5

    0ed0a53786dff4b1dd36e70c6cef4bcf

  • SHA1

    37f58ed3aa7680abedea902b2aa16ad8d223b00c

  • SHA256

    41d64e54ba81e2f67f1fbe8c8110df4bbb9436f8e157c9d4f030d3847cb8936b

  • SHA512

    7b89dfd72487b162660dc78c3a4ac3133661e7469ff223231df66f8d9af335c9c1d5a1afd5add1da3509c8e025497650ad05dd24b627c2278adb565d5255f4e1

  • SSDEEP

    3072:e+U5Ftb8lwBIlwqQ/pfRFiLiHo5LWAE5zY:WXb8iB1/BRUX6z

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      0ed0a53786dff4b1dd36e70c6cef4bcf_JaffaCakes118

    • Size

      124KB

    • MD5

      0ed0a53786dff4b1dd36e70c6cef4bcf

    • SHA1

      37f58ed3aa7680abedea902b2aa16ad8d223b00c

    • SHA256

      41d64e54ba81e2f67f1fbe8c8110df4bbb9436f8e157c9d4f030d3847cb8936b

    • SHA512

      7b89dfd72487b162660dc78c3a4ac3133661e7469ff223231df66f8d9af335c9c1d5a1afd5add1da3509c8e025497650ad05dd24b627c2278adb565d5255f4e1

    • SSDEEP

      3072:e+U5Ftb8lwBIlwqQ/pfRFiLiHo5LWAE5zY:WXb8iB1/BRUX6z

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks