c4a4f18e67d471798d61e8f6ecbcaf813d720f6ee745cb743511764d357f8aaa | Triage

Sharing

General

Target

3adf2f62989774cdc189485445ee0840_JaffaCakes118
Size

100KB
Sample

240711-1v4mqswckk
MD5

3adf2f62989774cdc189485445ee0840
SHA1

eb218b0a22f2cdd3f3f2e3aa38ae9ee967b3b0d6
SHA256

c4a4f18e67d471798d61e8f6ecbcaf813d720f6ee745cb743511764d357f8aaa
SHA512

127c5dabb648a5119f3ebdea54b4e1b86c81bf06d3093a0c081e2720b326db400b61c64fe326b1a357a54fa2deb821607fee3508d5f01b1fe4694000c83b1514
SSDEEP

1536:/YTWaGPbzoOD3sjcX1TI9D9f6+pGmDMcSOUhJyr4aYYxvWqfgoqHYRIA:/Y3EoOLwcXKIWMLaYY9Wqfgo2Y

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  3adf2f62989774cdc189485445ee0840_JaffaCakes118
- Size
  
  100KB
- MD5
  
  3adf2f62989774cdc189485445ee0840
- SHA1
  
  eb218b0a22f2cdd3f3f2e3aa38ae9ee967b3b0d6
- SHA256
  
  c4a4f18e67d471798d61e8f6ecbcaf813d720f6ee745cb743511764d357f8aaa
- SHA512
  
  127c5dabb648a5119f3ebdea54b4e1b86c81bf06d3093a0c081e2720b326db400b61c64fe326b1a357a54fa2deb821607fee3508d5f01b1fe4694000c83b1514
- SSDEEP
  
  1536:/YTWaGPbzoOD3sjcX1TI9D9f6+pGmDMcSOUhJyr4aYYxvWqfgoqHYRIA:/Y3EoOLwcXKIWMLaYY9Wqfgo2Y
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation