Overview

overview

8

Static

static

3

0f727c237d...18.exe

windows7-x64

0f727c237d...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f727c237df2b3a2b38487b53b005f91_JaffaCakes118

  • Size

    92KB

  • Sample

    240625-zep9qs1grb

  • MD5

    0f727c237df2b3a2b38487b53b005f91

  • SHA1

    f382ff1fe77f6ce5f0206378abe6488be3a5940c

  • SHA256

    4465778b8dbb0f41478ad1fba53cff111c6112e369fdac547eee5ff516219b80

  • SHA512

    eb8cf5b47c8d523d72402b8f9439ffbd09f7a351ba87a160d79dc3c00e8bfd4a3219e3569faab747ec8a9df89092043c28e9f2651ab15f4171b5c8920ee799c8

  • SSDEEP

    1536:fcrnsM5p7fL+jyX9Y9szz5VOm6hjtVVNFMLWetAEhEacLfHwzGo:fcrnsWpLK4n/5VOm6vNqyacszGo

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      0f727c237df2b3a2b38487b53b005f91_JaffaCakes118

    • Size

      92KB

    • MD5

      0f727c237df2b3a2b38487b53b005f91

    • SHA1

      f382ff1fe77f6ce5f0206378abe6488be3a5940c

    • SHA256

      4465778b8dbb0f41478ad1fba53cff111c6112e369fdac547eee5ff516219b80

    • SHA512

      eb8cf5b47c8d523d72402b8f9439ffbd09f7a351ba87a160d79dc3c00e8bfd4a3219e3569faab747ec8a9df89092043c28e9f2651ab15f4171b5c8920ee799c8

    • SSDEEP

      1536:fcrnsM5p7fL+jyX9Y9szz5VOm6hjtVVNFMLWetAEhEacLfHwzGo:fcrnsWpLK4n/5VOm6vNqyacszGo

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks