b432f9f2dbef70f3fb71364a416958e1f43f88f4c567e6a89f1dc1e75567d402 | Triage

Sharing

General

Target

3748e093ee925d232e2cb16ee5b5875d_JaffaCakes118
Size

78KB
Sample

240711-cflavavflc
MD5

3748e093ee925d232e2cb16ee5b5875d
SHA1

5b0d57cb9886b05e8b3253347b00de2dc2def3ea
SHA256

b432f9f2dbef70f3fb71364a416958e1f43f88f4c567e6a89f1dc1e75567d402
SHA512

d0ec8ab4efd243c0266b224d3f7bdf230f449d7f93a9a46f7d8f212538b7fd638d6c3d27e34ac18ce12b05dd687f66d49a340e01e0ecee489c5010a6c545a6f4
SSDEEP

1536:RN7embSLzQxvO1xWQJbOXqPDiKxfl75VwbfEiomJlIK:DbSLz11MQpOXqrf1wAiomJlIK

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  3748e093ee925d232e2cb16ee5b5875d_JaffaCakes118
- Size
  
  78KB
- MD5
  
  3748e093ee925d232e2cb16ee5b5875d
- SHA1
  
  5b0d57cb9886b05e8b3253347b00de2dc2def3ea
- SHA256
  
  b432f9f2dbef70f3fb71364a416958e1f43f88f4c567e6a89f1dc1e75567d402
- SHA512
  
  d0ec8ab4efd243c0266b224d3f7bdf230f449d7f93a9a46f7d8f212538b7fd638d6c3d27e34ac18ce12b05dd687f66d49a340e01e0ecee489c5010a6c545a6f4
- SSDEEP
  
  1536:RN7embSLzQxvO1xWQJbOXqPDiKxfl75VwbfEiomJlIK:DbSLz11MQpOXqrf1wAiomJlIK
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

persistenceprivilege_escalation