49326fb4608100c02346269721060c9c65b498277bf097465aa669f1e6041212 | Triage

Sharing

General

Target

2745e2dc05424e1c381f131eb32768ab_JaffaCakes118
Size

100KB
Sample

240706-b7p8fasclm
MD5

2745e2dc05424e1c381f131eb32768ab
SHA1

fe87b467550b28020b5d38ac17ce1c446df699a6
SHA256

49326fb4608100c02346269721060c9c65b498277bf097465aa669f1e6041212
SHA512

b33ace38303f90ea47d74d662cb6c2236356d052d32fa8b3ca02cfbad48de6d200b833b5f8aab7c6dfff86919f7e9d3d6cd9e6d1b44f8979a54131511d212c5a
SSDEEP

1536:miyC8NqE39Fwn+3UR2hn/m4nDFW8zgImUuTHM0mno+cJlId:A8E39FwhRAm78xuTSnohJlId

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  2745e2dc05424e1c381f131eb32768ab_JaffaCakes118
- Size
  
  100KB
- MD5
  
  2745e2dc05424e1c381f131eb32768ab
- SHA1
  
  fe87b467550b28020b5d38ac17ce1c446df699a6
- SHA256
  
  49326fb4608100c02346269721060c9c65b498277bf097465aa669f1e6041212
- SHA512
  
  b33ace38303f90ea47d74d662cb6c2236356d052d32fa8b3ca02cfbad48de6d200b833b5f8aab7c6dfff86919f7e9d3d6cd9e6d1b44f8979a54131511d212c5a
- SSDEEP
  
  1536:miyC8NqE39Fwn+3UR2hn/m4nDFW8zgImUuTHM0mno+cJlId:A8E39FwhRAm78xuTSnohJlId
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation