6b0d7d47b0fa010ccee3a7b01e7a8c18d9c5b18160fcdbdb1ba51abcd0afe3e8 | Triage

Sharing

General

Target

2eb965fca041eb26f99d450ad95a9656_JaffaCakes118
Size

92KB
Sample

240709-c86r9avcrd
MD5

2eb965fca041eb26f99d450ad95a9656
SHA1

e0b28a6fc2f53680ceae63fa2e839c930f39b79b
SHA256

6b0d7d47b0fa010ccee3a7b01e7a8c18d9c5b18160fcdbdb1ba51abcd0afe3e8
SHA512

7531d2422c7a01bc0a448060162c350d967cb7c1fd3ca1b41a2f66acec009a9a219cad7dbe25bd29652af4b099e40c76b8a4cc033d088c6564444cd5e57d3a77
SSDEEP

1536:Em67CHYstFp4X0OWieQB6n099O/pAEhEacLfHwzGo:Em6u4stoXkG6099wyacszGo

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  2eb965fca041eb26f99d450ad95a9656_JaffaCakes118
- Size
  
  92KB
- MD5
  
  2eb965fca041eb26f99d450ad95a9656
- SHA1
  
  e0b28a6fc2f53680ceae63fa2e839c930f39b79b
- SHA256
  
  6b0d7d47b0fa010ccee3a7b01e7a8c18d9c5b18160fcdbdb1ba51abcd0afe3e8
- SHA512
  
  7531d2422c7a01bc0a448060162c350d967cb7c1fd3ca1b41a2f66acec009a9a219cad7dbe25bd29652af4b099e40c76b8a4cc033d088c6564444cd5e57d3a77
- SSDEEP
  
  1536:Em67CHYstFp4X0OWieQB6n099O/pAEhEacLfHwzGo:Em6u4stoXkG6099wyacszGo
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation