Overview

overview

8

Static

static

3

15096ecc54...18.exe

windows7-x64

15096ecc54...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    15096ecc5429cdb2a4890e8334277878_JaffaCakes118

  • Size

    104KB

  • Sample

    240627-hkc3xsxckf

  • MD5

    15096ecc5429cdb2a4890e8334277878

  • SHA1

    3f06414d6297ecc5dc279275696f02fbccc1e6cc

  • SHA256

    e76b5fc41d762cb84be0b6fb95b793ac6a1a04ff6501a4cd548f4cb2dbc5753f

  • SHA512

    102c35bcb0bb46cf30a29d6a6d4ad180d5266c9dd9202f2996a200834a9027b51690af939fc1763475afa0f9b5ee1abe1af06a405686731901fb50c9b6191fa0

  • SSDEEP

    1536:0Az9xJSv0WdOKG4B21OEszCaSUn61yt+V+LYFP3ceu+nBgyoDPj6mQ:0Az9z+9l8MQpUn6kcw0sebBgyoD0

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      15096ecc5429cdb2a4890e8334277878_JaffaCakes118

    • Size

      104KB

    • MD5

      15096ecc5429cdb2a4890e8334277878

    • SHA1

      3f06414d6297ecc5dc279275696f02fbccc1e6cc

    • SHA256

      e76b5fc41d762cb84be0b6fb95b793ac6a1a04ff6501a4cd548f4cb2dbc5753f

    • SHA512

      102c35bcb0bb46cf30a29d6a6d4ad180d5266c9dd9202f2996a200834a9027b51690af939fc1763475afa0f9b5ee1abe1af06a405686731901fb50c9b6191fa0

    • SSDEEP

      1536:0Az9xJSv0WdOKG4B21OEszCaSUn61yt+V+LYFP3ceu+nBgyoDPj6mQ:0Az9z+9l8MQpUn6kcw0sebBgyoD0

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks