Overview

overview

8

Static

static

3

340d0e0d32...18.exe

windows7-x64

340d0e0d32...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    340d0e0d320076aaa25cb72cfe5cf3e2_JaffaCakes118

  • Size

    96KB

  • Sample

    240710-ksxteayapm

  • MD5

    340d0e0d320076aaa25cb72cfe5cf3e2

  • SHA1

    8edc5ffd60d00714fa2556c05b171b9874d74c0c

  • SHA256

    b3857a4709e589d9858349d41d1814000c3717018f83a804809f1d29d6800dad

  • SHA512

    4df956c8437e0fedc611ec8fe71fc9916ba1a5cd48b7f91a15dff483771553c0b1c3e48855366df016ad1fa57f4c0a2f73f7ee28bd8ae56ebf402d5689bcc6c6

  • SSDEEP

    1536:iSMK35fy/3v2NKWqYAZInjR+QSGHO8tZ6mKgeKq9vVoAu:RMK3NY3vdTXInjs8+BKUvVo/

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      340d0e0d320076aaa25cb72cfe5cf3e2_JaffaCakes118

    • Size

      96KB

    • MD5

      340d0e0d320076aaa25cb72cfe5cf3e2

    • SHA1

      8edc5ffd60d00714fa2556c05b171b9874d74c0c

    • SHA256

      b3857a4709e589d9858349d41d1814000c3717018f83a804809f1d29d6800dad

    • SHA512

      4df956c8437e0fedc611ec8fe71fc9916ba1a5cd48b7f91a15dff483771553c0b1c3e48855366df016ad1fa57f4c0a2f73f7ee28bd8ae56ebf402d5689bcc6c6

    • SSDEEP

      1536:iSMK35fy/3v2NKWqYAZInjR+QSGHO8tZ6mKgeKq9vVoAu:RMK3NY3vdTXInjs8+BKUvVo/

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks