800b5cc4e45afd34b633b6a5af2f2106d5365569f722bb8252ad9992f2f6fc36 | Triage

Sharing

General

Target

1897ab0b024d6e76cc9c2a1ad891f955_JaffaCakes118
Size

100KB
Sample

240628-dtw5ya1dpj
MD5

1897ab0b024d6e76cc9c2a1ad891f955
SHA1

858be84cd13c22ccdc33a1ca8977a6af8543d3b1
SHA256

800b5cc4e45afd34b633b6a5af2f2106d5365569f722bb8252ad9992f2f6fc36
SHA512

fa23bbd3407ea97dba8417c2cb754e7c82cc0baaeb6ea93c7eda461010d504b89182b29bd5af83d7192a58210d0a11bca40197e751fe44b8fd1b0aebb225c9ba
SSDEEP

3072:vJtBbzpm8Spmf3JALWcN4OykTsRgo7kY:1pqmvJLcN4l8FY

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  1897ab0b024d6e76cc9c2a1ad891f955_JaffaCakes118
- Size
  
  100KB
- MD5
  
  1897ab0b024d6e76cc9c2a1ad891f955
- SHA1
  
  858be84cd13c22ccdc33a1ca8977a6af8543d3b1
- SHA256
  
  800b5cc4e45afd34b633b6a5af2f2106d5365569f722bb8252ad9992f2f6fc36
- SHA512
  
  fa23bbd3407ea97dba8417c2cb754e7c82cc0baaeb6ea93c7eda461010d504b89182b29bd5af83d7192a58210d0a11bca40197e751fe44b8fd1b0aebb225c9ba
- SSDEEP
  
  3072:vJtBbzpm8Spmf3JALWcN4OykTsRgo7kY:1pqmvJLcN4l8FY
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation