Overview

overview

8

Static

static

3

372ad85868...18.exe

windows7-x64

372ad85868...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    372ad8586864b02a869293a48554ad1d_JaffaCakes118

  • Size

    92KB

  • Sample

    240711-bn16latamc

  • MD5

    372ad8586864b02a869293a48554ad1d

  • SHA1

    778f4b7b76378249f90086aef858c5f53fa2ff03

  • SHA256

    bf9a11a2367a49129cee20b0f2668956e64108c0c09ffc584af4f64126898317

  • SHA512

    58444bdcef0435497c7a2febb6043e6525a1e6915778148d21dcdee87ba1ec3e34d67a70b0f2ce29c912785c5357ca88e7817b6bd135c52a6eb3a4da859ae9fe

  • SSDEEP

    1536:l+aUcVR1MqquN5Ph2ufM02MHkmuy9x6b97IpUaoxMWNLzMo:ldUcxquN5PYCz2ME9IxixxlzMo

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      372ad8586864b02a869293a48554ad1d_JaffaCakes118

    • Size

      92KB

    • MD5

      372ad8586864b02a869293a48554ad1d

    • SHA1

      778f4b7b76378249f90086aef858c5f53fa2ff03

    • SHA256

      bf9a11a2367a49129cee20b0f2668956e64108c0c09ffc584af4f64126898317

    • SHA512

      58444bdcef0435497c7a2febb6043e6525a1e6915778148d21dcdee87ba1ec3e34d67a70b0f2ce29c912785c5357ca88e7817b6bd135c52a6eb3a4da859ae9fe

    • SSDEEP

      1536:l+aUcVR1MqquN5Ph2ufM02MHkmuy9x6b97IpUaoxMWNLzMo:ldUcxquN5PYCz2ME9IxixxlzMo

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks