118cdf73d1a1f4ddeaecabc4f83669551600c6fed9ef53acc106108700459ba9 | Triage

Sharing

General

Target

367ca5b03d61725c0d88ae4e7e340611_JaffaCakes118
Size

12KB
Sample

240710-1gnpcsteka
MD5

367ca5b03d61725c0d88ae4e7e340611
SHA1

ab621d31f54100f9c516299ef6217dbb17561fec
SHA256

118cdf73d1a1f4ddeaecabc4f83669551600c6fed9ef53acc106108700459ba9
SHA512

53f42cd8a8b840d9add29ed3f5609d77f76f46f3be1aab9b168b66115bb341784a0d1caaa7aa755540afb8719127b4c34dfda9bc32ca9c80cd2342140d640ca4
SSDEEP

384:6+iiK3Zy0MRZTR5i/ofmY6i22pKCVEIDXefA:NK3Zy0L/QU2TmIDZ

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  367ca5b03d61725c0d88ae4e7e340611_JaffaCakes118
- Size
  
  12KB
- MD5
  
  367ca5b03d61725c0d88ae4e7e340611
- SHA1
  
  ab621d31f54100f9c516299ef6217dbb17561fec
- SHA256
  
  118cdf73d1a1f4ddeaecabc4f83669551600c6fed9ef53acc106108700459ba9
- SHA512
  
  53f42cd8a8b840d9add29ed3f5609d77f76f46f3be1aab9b168b66115bb341784a0d1caaa7aa755540afb8719127b4c34dfda9bc32ca9c80cd2342140d640ca4
- SSDEEP
  
  384:6+iiK3Zy0MRZTR5i/ofmY6i22pKCVEIDXefA:NK3Zy0L/QU2TmIDZ
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation