Overview

overview

8

Static

static

3

2327569f0f...18.exe

windows7-x64

8

2327569f0f...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2327569f0f2f8083a202481348dd386e_JaffaCakes118

  • Size

    31KB

  • Sample

    240703-vprhbszbmp

  • MD5

    2327569f0f2f8083a202481348dd386e

  • SHA1

    91336479a23bbbc71e87771297d20d87d5751415

  • SHA256

    c1e11a48542203f8bf4d4d8ae76c7e99699da9671c449db8be71b53f547477e9

  • SHA512

    9c6dd89e46887c6fa557458f3abecca8fc06ff6869ab88f85bc9baffd58f432f755b2763144198d31f78ba9a699ba80ee5ffc58b5b715867a7d102211961c7a0

  • SSDEEP

    768:2PYRPy2urgqE8QmP5pd87SfHJRbkYWhE9w:2PqOBr27eES

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      2327569f0f2f8083a202481348dd386e_JaffaCakes118

    • Size

      31KB

    • MD5

      2327569f0f2f8083a202481348dd386e

    • SHA1

      91336479a23bbbc71e87771297d20d87d5751415

    • SHA256

      c1e11a48542203f8bf4d4d8ae76c7e99699da9671c449db8be71b53f547477e9

    • SHA512

      9c6dd89e46887c6fa557458f3abecca8fc06ff6869ab88f85bc9baffd58f432f755b2763144198d31f78ba9a699ba80ee5ffc58b5b715867a7d102211961c7a0

    • SSDEEP

      768:2PYRPy2urgqE8QmP5pd87SfHJRbkYWhE9w:2PqOBr27eES

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks