Overview

overview

8

Static

static

3

32b06a8a48...18.exe

windows7-x64

32b06a8a48...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32b06a8a4868cc81e3cd4d09d8fb72e2_JaffaCakes118

  • Size

    100KB

  • Sample

    240710-ba1ynsyblf

  • MD5

    32b06a8a4868cc81e3cd4d09d8fb72e2

  • SHA1

    b5099e557715de0f697025ad36c5412eda2411a2

  • SHA256

    ddca0fa7980c59a8e7ad6fcbed84ca528b2f98833f90fa08c108fa37a1f03905

  • SHA512

    22d60f2f55e7448daf7119ebd8a52aa7bd234cfc6983fd6ff78582bf37b56fa80dfdf8315104eb72e2d18afb1ed499e331537c02da8da8216e55cc6ef88b9472

  • SSDEEP

    1536:yJCyuYJt1cCoux6lM/JYsh4fQ8mbXMuBzWvykTw5Rgo70HYRIA:yJEgtnwfQrLdYykTsRgo7kY

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      32b06a8a4868cc81e3cd4d09d8fb72e2_JaffaCakes118

    • Size

      100KB

    • MD5

      32b06a8a4868cc81e3cd4d09d8fb72e2

    • SHA1

      b5099e557715de0f697025ad36c5412eda2411a2

    • SHA256

      ddca0fa7980c59a8e7ad6fcbed84ca528b2f98833f90fa08c108fa37a1f03905

    • SHA512

      22d60f2f55e7448daf7119ebd8a52aa7bd234cfc6983fd6ff78582bf37b56fa80dfdf8315104eb72e2d18afb1ed499e331537c02da8da8216e55cc6ef88b9472

    • SSDEEP

      1536:yJCyuYJt1cCoux6lM/JYsh4fQ8mbXMuBzWvykTw5Rgo70HYRIA:yJEgtnwfQrLdYykTsRgo7kY

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks