b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab | Triage

Sharing

General

Target

24c639a18297db41949983f59e4054fa_JaffaCakes118
Size

1.2MB
Sample

240704-f3g4gswfql
MD5

24c639a18297db41949983f59e4054fa
SHA1

999b084361f15698429f7d3c76462e2f45215161
SHA256

b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab
SHA512

4673629b812587745fb62d9a261b6487d7e5322dd57f109a70fc17d12621a8f6fb5c509f1f64b7253259cd9a801c34f5a207f043657f0641b23a76098e3bcc1a
SSDEEP

12288:eg8GBI8sEyF6O5O2xDTMuQQpRhO54snV80LLbmVSpcStKpq9gJvvUotI45Ce7rQo:e4BQEwlFTjgN/bm0Lf9EvUo75CePpTk

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  24c639a18297db41949983f59e4054fa_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  24c639a18297db41949983f59e4054fa
- SHA1
  
  999b084361f15698429f7d3c76462e2f45215161
- SHA256
  
  b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab
- SHA512
  
  4673629b812587745fb62d9a261b6487d7e5322dd57f109a70fc17d12621a8f6fb5c509f1f64b7253259cd9a801c34f5a207f043657f0641b23a76098e3bcc1a
- SSDEEP
  
  12288:eg8GBI8sEyF6O5O2xDTMuQQpRhO54snV80LLbmVSpcStKpq9gJvvUotI45Ce7rQo:e4BQEwlFTjgN/bm0Lf9EvUo75CePpTk
Score

8^/10

evasion persistence privilege_escalation
- Disables Task Manager via registry modification
  evasion
- Event Triggered Execution: AppCert DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppCert DLLs

Privilege Escalation

Event Triggered Execution

AppCert DLLs

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation