Overview

overview

8

Static

static

3

0f786367ba...18.exe

windows7-x64

0f786367ba...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f786367ba1cddfbab6aed85701ea556_JaffaCakes118

  • Size

    78KB

  • Sample

    240625-zksbaavdjq

  • MD5

    0f786367ba1cddfbab6aed85701ea556

  • SHA1

    c085821c870914d323143143333c533b3c9c4124

  • SHA256

    5080cbd805236972ec636b8b15a035b78a039e8a09676ccd3ba85f0b27ef1305

  • SHA512

    5f9da9487c4678710afa459ed5a2dc4c54ce5562b9a7dbbc1a96053565fcc8303a6ea95e5413d9b1d3f6e68f0ff5b398f6273eec6223078462f5eb5ca3e657ef

  • SSDEEP

    1536:tWG/kSUTkSjUdAUb4qSgz6zRk54Hk3QRkE8EU1DpgTTAoKJlIK:ewdA24kzbwatrp6TAoKJlIK

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      0f786367ba1cddfbab6aed85701ea556_JaffaCakes118

    • Size

      78KB

    • MD5

      0f786367ba1cddfbab6aed85701ea556

    • SHA1

      c085821c870914d323143143333c533b3c9c4124

    • SHA256

      5080cbd805236972ec636b8b15a035b78a039e8a09676ccd3ba85f0b27ef1305

    • SHA512

      5f9da9487c4678710afa459ed5a2dc4c54ce5562b9a7dbbc1a96053565fcc8303a6ea95e5413d9b1d3f6e68f0ff5b398f6273eec6223078462f5eb5ca3e657ef

    • SSDEEP

      1536:tWG/kSUTkSjUdAUb4qSgz6zRk54Hk3QRkE8EU1DpgTTAoKJlIK:ewdA24kzbwatrp6TAoKJlIK

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks