554ca08da8485788ea22f846706e69c3d60d8c3830ffd8357554741d8ab48cf5 | Triage

Sharing

General

Target

32e0fcb59c1d52ee2325e63539dd3e3c_JaffaCakes118
Size

104KB
Sample

240710-cd7q3azdpk
MD5

32e0fcb59c1d52ee2325e63539dd3e3c
SHA1

c57390c1aafeb7443f100351b6e33b0a045f4d46
SHA256

554ca08da8485788ea22f846706e69c3d60d8c3830ffd8357554741d8ab48cf5
SHA512

362650f63e740f8ee56a71732a15c6ddf6978055eff95fdaa99d3addf27f5ac333a431b4974c0002213f763ebfd8483147c14c73b408565283b89248de287d10
SSDEEP

3072:KZ5gEuNmRiDp6RaXD8LYhUgJebBgyoD0:mNuNlX8L5qG

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  32e0fcb59c1d52ee2325e63539dd3e3c_JaffaCakes118
- Size
  
  104KB
- MD5
  
  32e0fcb59c1d52ee2325e63539dd3e3c
- SHA1
  
  c57390c1aafeb7443f100351b6e33b0a045f4d46
- SHA256
  
  554ca08da8485788ea22f846706e69c3d60d8c3830ffd8357554741d8ab48cf5
- SHA512
  
  362650f63e740f8ee56a71732a15c6ddf6978055eff95fdaa99d3addf27f5ac333a431b4974c0002213f763ebfd8483147c14c73b408565283b89248de287d10
- SSDEEP
  
  3072:KZ5gEuNmRiDp6RaXD8LYhUgJebBgyoD0:mNuNlX8L5qG
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation