Overview

overview

8

Static

static

3

194df8c145...18.exe

windows7-x64

194df8c145...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    194df8c14553aeeed6a58a49ad71e767_JaffaCakes118

  • Size

    104KB

  • Sample

    240628-je7wsa1bkj

  • MD5

    194df8c14553aeeed6a58a49ad71e767

  • SHA1

    7868e0c1c96d86235d02f185d7b01fbbf6398d73

  • SHA256

    5209315ccc59308f3c32f331807055abf23ae5f246393e23f0c0e9ac41df21fe

  • SHA512

    7e8d8f3fce195b99568621e3e78028d632d8db179849515ec9eb1febce4497d54eb2764e59e01383dd63eb8f71ffbf5bb98b87927ff4201a35c5e6dc71dcb190

  • SSDEEP

    3072:hJesfF3noMXZodmEoxUJMjgFebBgyoD0:v9N3Zr3+JWgcqG

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      194df8c14553aeeed6a58a49ad71e767_JaffaCakes118

    • Size

      104KB

    • MD5

      194df8c14553aeeed6a58a49ad71e767

    • SHA1

      7868e0c1c96d86235d02f185d7b01fbbf6398d73

    • SHA256

      5209315ccc59308f3c32f331807055abf23ae5f246393e23f0c0e9ac41df21fe

    • SHA512

      7e8d8f3fce195b99568621e3e78028d632d8db179849515ec9eb1febce4497d54eb2764e59e01383dd63eb8f71ffbf5bb98b87927ff4201a35c5e6dc71dcb190

    • SSDEEP

      3072:hJesfF3noMXZodmEoxUJMjgFebBgyoD0:v9N3Zr3+JWgcqG

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks