Overview

overview

8

Static

static

3

2af32dfd3f...18.dll

windows7-x64

8

2af32dfd3f...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2af32dfd3fffe59dbcba4a9580cf4d30_JaffaCakes118

  • Size

    13KB

  • Sample

    240708-ewh7jasbkl

  • MD5

    2af32dfd3fffe59dbcba4a9580cf4d30

  • SHA1

    c40cf274c408048ca62507658cdf041df0fa43cd

  • SHA256

    ad7841bf1fcae5bf4291e8d5a8489f2a875ae0947f4757e408d3a31c28c79870

  • SHA512

    7b374ef4b5c00689887556795e4e8b527ab2c0366e9b82632177f132a67ff71e5382603e5d2b1042a01a3ee20b1700603d9339e972889d79e01e0fa653af9d57

  • SSDEEP

    384:mjGmDrILipqOUK3H+NEUgQIrUiPOI9kucwRQk/:MvIGI4KEUgX35cZe

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      2af32dfd3fffe59dbcba4a9580cf4d30_JaffaCakes118

    • Size

      13KB

    • MD5

      2af32dfd3fffe59dbcba4a9580cf4d30

    • SHA1

      c40cf274c408048ca62507658cdf041df0fa43cd

    • SHA256

      ad7841bf1fcae5bf4291e8d5a8489f2a875ae0947f4757e408d3a31c28c79870

    • SHA512

      7b374ef4b5c00689887556795e4e8b527ab2c0366e9b82632177f132a67ff71e5382603e5d2b1042a01a3ee20b1700603d9339e972889d79e01e0fa653af9d57

    • SSDEEP

      384:mjGmDrILipqOUK3H+NEUgQIrUiPOI9kucwRQk/:MvIGI4KEUgX35cZe

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks