8d6c19f8be60086b91a0a7167759eafbed619fd695de124cb29f1ad500186f3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a71f475698d8fd864bc175abf64f8c2_JaffaCakes118
Size

88KB
Sample

240711-x6fs9staqf
MD5

3a71f475698d8fd864bc175abf64f8c2
SHA1

2b61ec5222eca48d69e853219de11481eca3305c
SHA256

8d6c19f8be60086b91a0a7167759eafbed619fd695de124cb29f1ad500186f3e
SHA512

415b11c7900ee6dffbad229c9dca4e18472f888f817c57d61d4965da4cb15003f390b34b7528490b2d75351f28d731d886220adc5cfa1301d8e44669f3e00e9d
SSDEEP

1536:1JI31y7R9TShNa5RcWXpU6LK+WJ3tZEk7dXKqEEEC7xZopSluTHT9KoTJlIU:1JIlO9GhNCKA9K+W1t6kBXvBEC7oEkrL

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  3a71f475698d8fd864bc175abf64f8c2_JaffaCakes118
- Size
  
  88KB
- MD5
  
  3a71f475698d8fd864bc175abf64f8c2
- SHA1
  
  2b61ec5222eca48d69e853219de11481eca3305c
- SHA256
  
  8d6c19f8be60086b91a0a7167759eafbed619fd695de124cb29f1ad500186f3e
- SHA512
  
  415b11c7900ee6dffbad229c9dca4e18472f888f817c57d61d4965da4cb15003f390b34b7528490b2d75351f28d731d886220adc5cfa1301d8e44669f3e00e9d
- SSDEEP
  
  1536:1JI31y7R9TShNa5RcWXpU6LK+WJ3tZEk7dXKqEEEC7xZopSluTHT9KoTJlIU:1JIlO9GhNCKA9K+W1t6kBXvBEC7oEkrL
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation