569644d0cc30138902a5318328ffc3527afa9e3b11ebc157976da51f22f6994b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ad59a76851fdfcb14565de5bd239e7_JaffaCakes118
Size

77KB
Sample

240627-mnmhzszarj
MD5

15ad59a76851fdfcb14565de5bd239e7
SHA1

8e5df459c75c1c1717ced0cdbd66ade6c76ed9df
SHA256

569644d0cc30138902a5318328ffc3527afa9e3b11ebc157976da51f22f6994b
SHA512

74cd76ec082d2c1e9d98a647774a4280acbd179c4950caba5af2a0478ce0cdb543b9b9ca5fdfc4d3a1c0c27c898674211912ea44541911fc7c6c0f28edb73186
SSDEEP

1536:y1U7X8TmEIJmJ3txU0fsHkeCyPWpVoghTm7fUkjGvjGDoz:BX8IshU00EdAKnOVj7Doz

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  15ad59a76851fdfcb14565de5bd239e7_JaffaCakes118
- Size
  
  77KB
- MD5
  
  15ad59a76851fdfcb14565de5bd239e7
- SHA1
  
  8e5df459c75c1c1717ced0cdbd66ade6c76ed9df
- SHA256
  
  569644d0cc30138902a5318328ffc3527afa9e3b11ebc157976da51f22f6994b
- SHA512
  
  74cd76ec082d2c1e9d98a647774a4280acbd179c4950caba5af2a0478ce0cdb543b9b9ca5fdfc4d3a1c0c27c898674211912ea44541911fc7c6c0f28edb73186
- SSDEEP
  
  1536:y1U7X8TmEIJmJ3txU0fsHkeCyPWpVoghTm7fUkjGvjGDoz:BX8IshU00EdAKnOVj7Doz
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation