Overview

overview

8

Static

static

3

23d2cdd3a7...18.exe

windows7-x64

23d2cdd3a7...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23d2cdd3a7592622496cdf14168ecdfe_JaffaCakes118

  • Size

    100KB

  • Sample

    240703-3cshvstapg

  • MD5

    23d2cdd3a7592622496cdf14168ecdfe

  • SHA1

    c02e8e0e5b9980b866be49fa85679afcd7974e20

  • SHA256

    3debb373f20e313bea81ca8089e045cf29532d168562ff9b5c24dd386d5580cb

  • SHA512

    3ea5401023dbe6f8b2e96c5e6fa9e69a4005295a1b08769f9a5cdf8c97962f5c1a70ebf5cd4d6f02f09be9fbb99b496a4f391a927456636c65c31efbd40da96c

  • SSDEEP

    3072:gVWF7qpvyTzIxnegfrsKt2TUx0YPLgo47Y:gg5FQxOKt2QNI7Y

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      23d2cdd3a7592622496cdf14168ecdfe_JaffaCakes118

    • Size

      100KB

    • MD5

      23d2cdd3a7592622496cdf14168ecdfe

    • SHA1

      c02e8e0e5b9980b866be49fa85679afcd7974e20

    • SHA256

      3debb373f20e313bea81ca8089e045cf29532d168562ff9b5c24dd386d5580cb

    • SHA512

      3ea5401023dbe6f8b2e96c5e6fa9e69a4005295a1b08769f9a5cdf8c97962f5c1a70ebf5cd4d6f02f09be9fbb99b496a4f391a927456636c65c31efbd40da96c

    • SSDEEP

      3072:gVWF7qpvyTzIxnegfrsKt2TUx0YPLgo47Y:gg5FQxOKt2QNI7Y

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks