Overview

overview

8

Static

static

3

20d116c257...18.exe

windows7-x64

20d116c257...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20d116c25719fbc323f2d0168ffef338_JaffaCakes118

  • Size

    77KB

  • Sample

    240703-c8rckatcqd

  • MD5

    20d116c25719fbc323f2d0168ffef338

  • SHA1

    ebfdc3ac9b4352e9c95221614aedde8217a1f7d3

  • SHA256

    b699a7c823abcb221efc7749042b2954a7bd033485b4563743d2a683ec7ebcbb

  • SHA512

    552285d364a635fed9477d1b2f82b918129d927a5578a524e9cb9305075596c5d66545f65fbb985ca57ea103194d408b4c584016949080e7234a172749b8f254

  • SSDEEP

    1536:/1UwwVXf38N9XOXqK1xvjl3dd6RExyItoSOUkjGdGGDoz:D9XO53vZdddntEjyDoz

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      20d116c25719fbc323f2d0168ffef338_JaffaCakes118

    • Size

      77KB

    • MD5

      20d116c25719fbc323f2d0168ffef338

    • SHA1

      ebfdc3ac9b4352e9c95221614aedde8217a1f7d3

    • SHA256

      b699a7c823abcb221efc7749042b2954a7bd033485b4563743d2a683ec7ebcbb

    • SHA512

      552285d364a635fed9477d1b2f82b918129d927a5578a524e9cb9305075596c5d66545f65fbb985ca57ea103194d408b4c584016949080e7234a172749b8f254

    • SSDEEP

      1536:/1UwwVXf38N9XOXqK1xvjl3dd6RExyItoSOUkjGdGGDoz:D9XO53vZdddntEjyDoz

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks