Overview

overview

8

Static

static

3

294f4683e7...18.exe

windows7-x64

294f4683e7...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    294f4683e76f872203232db62c2ea49f_JaffaCakes118

  • Size

    124KB

  • Sample

    240706-xvq5vstare

  • MD5

    294f4683e76f872203232db62c2ea49f

  • SHA1

    f7943dff41b24bd0b24158163852b17a2435cd7c

  • SHA256

    2e8ccb6493c05309608f854c628d0acc5b99ea26bd2e377d8a3d568ea26e4554

  • SHA512

    d03a94e26e9cec0fa39360c018b9f90e32c20b8779eee6571fea8045c3b8cb1b6a59b38a3283308789f558a954b6411ede39669ea9e1bca67142ffd002e1902a

  • SSDEEP

    3072:v8I4KQla4s0VBGl16QWwsruEJgZXK5EiLiHo5LWAE5zY:vd/yG0VVQPGBAK59X6z

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      294f4683e76f872203232db62c2ea49f_JaffaCakes118

    • Size

      124KB

    • MD5

      294f4683e76f872203232db62c2ea49f

    • SHA1

      f7943dff41b24bd0b24158163852b17a2435cd7c

    • SHA256

      2e8ccb6493c05309608f854c628d0acc5b99ea26bd2e377d8a3d568ea26e4554

    • SHA512

      d03a94e26e9cec0fa39360c018b9f90e32c20b8779eee6571fea8045c3b8cb1b6a59b38a3283308789f558a954b6411ede39669ea9e1bca67142ffd002e1902a

    • SSDEEP

      3072:v8I4KQla4s0VBGl16QWwsruEJgZXK5EiLiHo5LWAE5zY:vd/yG0VVQPGBAK59X6z

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks