cc8c0ca2dbb4a0e0960f14a58ec4945c10b6ebbef7db8a88dcccab070a064291 | Triage

Sharing

General

Target

104fcf021efeaab4375f4e7c69c09f6c_JaffaCakes118
Size

92KB
Sample

240626-b7hhlazfpn
MD5

104fcf021efeaab4375f4e7c69c09f6c
SHA1

e45b93467312e025dba5b9105590eb59a2698dad
SHA256

cc8c0ca2dbb4a0e0960f14a58ec4945c10b6ebbef7db8a88dcccab070a064291
SHA512

75be6602bc2c89eaa8bdbbc2e746eda0717858b9353ad5a17e458021a863a3ef53d413434ab25d3cee075b75036addf417f69f4f56da0a757250cdd90d212b41
SSDEEP

1536:1rZC3/Hjq3OO7BxJJkxrjHL2Xv8PrBK4gD6SW+bVBZrYV0o9e:Jc3rGOO7fAj8wBk6wVB60o9

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  104fcf021efeaab4375f4e7c69c09f6c_JaffaCakes118
- Size
  
  92KB
- MD5
  
  104fcf021efeaab4375f4e7c69c09f6c
- SHA1
  
  e45b93467312e025dba5b9105590eb59a2698dad
- SHA256
  
  cc8c0ca2dbb4a0e0960f14a58ec4945c10b6ebbef7db8a88dcccab070a064291
- SHA512
  
  75be6602bc2c89eaa8bdbbc2e746eda0717858b9353ad5a17e458021a863a3ef53d413434ab25d3cee075b75036addf417f69f4f56da0a757250cdd90d212b41
- SSDEEP
  
  1536:1rZC3/Hjq3OO7BxJJkxrjHL2Xv8PrBK4gD6SW+bVBZrYV0o9e:Jc3rGOO7fAj8wBk6wVB60o9
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation