Overview

overview

8

Static

static

3

323b741d3a...18.exe

windows7-x64

323b741d3a...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    323b741d3a11b2f839103478b6d07441_JaffaCakes118

  • Size

    100KB

  • Sample

    240709-2ewgvszcpm

  • MD5

    323b741d3a11b2f839103478b6d07441

  • SHA1

    5cea9a2b09d66b3a91cfa78554f935fb02228cb6

  • SHA256

    6fe2888b5193786366def27d691bc895688fea2183e359d0c3b4c723d87584e9

  • SHA512

    4baa5f66502f57132c76bc6b8023abfa2c141c99a222e42cb7b0d9dbfea35063507e2e148b0330a89e7cecafdebd1469c02a14d69a4aef32949ad68e03e0651e

  • SSDEEP

    1536:y8y1FnorN9FgFJteaFU1nUZcgl5ZIxbkmXIMg0Yl5Lgo4zHYRIA:yN1Fnop9gzDFU1AcgiO7x0YPLgo47Y

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      323b741d3a11b2f839103478b6d07441_JaffaCakes118

    • Size

      100KB

    • MD5

      323b741d3a11b2f839103478b6d07441

    • SHA1

      5cea9a2b09d66b3a91cfa78554f935fb02228cb6

    • SHA256

      6fe2888b5193786366def27d691bc895688fea2183e359d0c3b4c723d87584e9

    • SHA512

      4baa5f66502f57132c76bc6b8023abfa2c141c99a222e42cb7b0d9dbfea35063507e2e148b0330a89e7cecafdebd1469c02a14d69a4aef32949ad68e03e0651e

    • SSDEEP

      1536:y8y1FnorN9FgFJteaFU1nUZcgl5ZIxbkmXIMg0Yl5Lgo4zHYRIA:yN1Fnop9gzDFU1AcgiO7x0YPLgo47Y

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks