Overview

overview

8

Static

static

3

28348baebb...18.exe

windows7-x64

28348baebb...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28348baebb60a844b30fb935f6761df5_JaffaCakes118

  • Size

    100KB

  • Sample

    240706-mdwnxayclf

  • MD5

    28348baebb60a844b30fb935f6761df5

  • SHA1

    f5c17a2f8160cf4a4032acb90945ea87d4a2afec

  • SHA256

    45660d2a32af03fa844f2777b185162e725ab7ca6f2081db1f645ce1d3b3936e

  • SHA512

    21ceca79703a73acdcfb1eea7a4cf405f3599402fa200c67dbb5554728d027442cfd6c94622a435b644a7495836072dd4a80d5410d7f42870f6d0ea0b7404649

  • SSDEEP

    1536:8j7imbketTqNW+9z+vwXg+Tor7LVg1q1rcUdib4zgFL1joQ8qte:83v7tTq9z+oXf2WkcugF5joqt

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      28348baebb60a844b30fb935f6761df5_JaffaCakes118

    • Size

      100KB

    • MD5

      28348baebb60a844b30fb935f6761df5

    • SHA1

      f5c17a2f8160cf4a4032acb90945ea87d4a2afec

    • SHA256

      45660d2a32af03fa844f2777b185162e725ab7ca6f2081db1f645ce1d3b3936e

    • SHA512

      21ceca79703a73acdcfb1eea7a4cf405f3599402fa200c67dbb5554728d027442cfd6c94622a435b644a7495836072dd4a80d5410d7f42870f6d0ea0b7404649

    • SSDEEP

      1536:8j7imbketTqNW+9z+vwXg+Tor7LVg1q1rcUdib4zgFL1joQ8qte:83v7tTq9z+oXf2WkcugF5joqt

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks