d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3 | Triage

Sharing

General

Target

38ba91855e3d7d70862b24d81357858f_JaffaCakes118
Size

88KB
Sample

240711-mej2hasdlp
MD5

38ba91855e3d7d70862b24d81357858f
SHA1

b9c84a9c247805a37647c560252ed83567255a17
SHA256

d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3
SHA512

6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684
SSDEEP

1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  38ba91855e3d7d70862b24d81357858f_JaffaCakes118
- Size
  
  88KB
- MD5
  
  38ba91855e3d7d70862b24d81357858f
- SHA1
  
  b9c84a9c247805a37647c560252ed83567255a17
- SHA256
  
  d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3
- SHA512
  
  6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684
- SSDEEP
  
  1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2