1c8a2571c79fdfe480b7f7bfb7f9bb4a47ea9d096e38ca06cb0921fb5b5d38a5 | Triage

Sharing

General

Target

301afad646bc3b29c6884b645bc5bbc4_JaffaCakes118
Size

88KB
Sample

240709-m4c99a1bpn
MD5

301afad646bc3b29c6884b645bc5bbc4
SHA1

191b310f2adba23df41d30debfe2046720ed5d8a
SHA256

1c8a2571c79fdfe480b7f7bfb7f9bb4a47ea9d096e38ca06cb0921fb5b5d38a5
SHA512

26b26e8189f0d0da78c0ec8506d5bcefd80e7dbf44e67ff033e65cb3a0116ef38ac49bc2cca628a5a1c9a63716b756f961210d04f2cbf7483180a4481e403e7f
SSDEEP

1536:yaoElwOgFGZYmkh3Al2j21Mo+3tO30nEEEC7xZopSluTHT9KoTJlIU:yaom5SGZYmMAlEV33BEC7oEkrhKoTJlz

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  301afad646bc3b29c6884b645bc5bbc4_JaffaCakes118
- Size
  
  88KB
- MD5
  
  301afad646bc3b29c6884b645bc5bbc4
- SHA1
  
  191b310f2adba23df41d30debfe2046720ed5d8a
- SHA256
  
  1c8a2571c79fdfe480b7f7bfb7f9bb4a47ea9d096e38ca06cb0921fb5b5d38a5
- SHA512
  
  26b26e8189f0d0da78c0ec8506d5bcefd80e7dbf44e67ff033e65cb3a0116ef38ac49bc2cca628a5a1c9a63716b756f961210d04f2cbf7483180a4481e403e7f
- SSDEEP
  
  1536:yaoElwOgFGZYmkh3Al2j21Mo+3tO30nEEEC7xZopSluTHT9KoTJlIU:yaom5SGZYmMAlEV33BEC7oEkrhKoTJlz
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation