21c28842762b076acd88f0b75a9fddc8f7e7881a58aa08c9ec0bca2f4715c4b4 | Triage

Sharing

General

Target

194617103217d36b027dbbbcf6b857dc_JaffaCakes118
Size

96KB
Sample

240628-h8t2cazgln
MD5

194617103217d36b027dbbbcf6b857dc
SHA1

a14c41a4d4ebe9456e7b9fd9a34c1d34527e900d
SHA256

21c28842762b076acd88f0b75a9fddc8f7e7881a58aa08c9ec0bca2f4715c4b4
SHA512

7667b6bc80fad40f27b63e11fe6fbf17dbdf2cfe06e17bcbafe0250f7bd488ecfdf671b5bc39b332135520b568f2f77cae57f83182a55cdb7ad117520abe4f8d
SSDEEP

1536:8bLtEqWoWy5orqTlkDYMvld1NzJ5MDDNy1hgeKq9vVoAu:0LmqVbo+T6DYM/1RJunNy15KUvVo/

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  194617103217d36b027dbbbcf6b857dc_JaffaCakes118
- Size
  
  96KB
- MD5
  
  194617103217d36b027dbbbcf6b857dc
- SHA1
  
  a14c41a4d4ebe9456e7b9fd9a34c1d34527e900d
- SHA256
  
  21c28842762b076acd88f0b75a9fddc8f7e7881a58aa08c9ec0bca2f4715c4b4
- SHA512
  
  7667b6bc80fad40f27b63e11fe6fbf17dbdf2cfe06e17bcbafe0250f7bd488ecfdf671b5bc39b332135520b568f2f77cae57f83182a55cdb7ad117520abe4f8d
- SSDEEP
  
  1536:8bLtEqWoWy5orqTlkDYMvld1NzJ5MDDNy1hgeKq9vVoAu:0LmqVbo+T6DYM/1RJunNy15KUvVo/
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation