1aff840a158f365072cc14cb7237e2c80958cf6270797ba25a81cea2acfa2955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da72a5e38bb380c5461b51b0e16d030_JaffaCakes118
Size

124KB
Sample

240712-q9am4awerr
MD5

3da72a5e38bb380c5461b51b0e16d030
SHA1

03e369ad0f7bd008712263bfd189ec09ab8b11fa
SHA256

1aff840a158f365072cc14cb7237e2c80958cf6270797ba25a81cea2acfa2955
SHA512

907ef2a3e7bd05b2ffdcca683563117cbae091979c489f988275e11e060c8cdd44a2bd49e7dcb115d54533b595b9e9b92f0f138ff695bfd6e4ca14b8dd26c804
SSDEEP

1536:zNoAx91qg6t5AjVfuVd9XnS2HljpdXbUaF283DOliLFcHo5A4PXHuAkl5zCH:WAkh4jGd9CU5283DiiLiHo5LWAE5zY

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  3da72a5e38bb380c5461b51b0e16d030_JaffaCakes118
- Size
  
  124KB
- MD5
  
  3da72a5e38bb380c5461b51b0e16d030
- SHA1
  
  03e369ad0f7bd008712263bfd189ec09ab8b11fa
- SHA256
  
  1aff840a158f365072cc14cb7237e2c80958cf6270797ba25a81cea2acfa2955
- SHA512
  
  907ef2a3e7bd05b2ffdcca683563117cbae091979c489f988275e11e060c8cdd44a2bd49e7dcb115d54533b595b9e9b92f0f138ff695bfd6e4ca14b8dd26c804
- SSDEEP
  
  1536:zNoAx91qg6t5AjVfuVd9XnS2HljpdXbUaF283DOliLFcHo5A4PXHuAkl5zCH:WAkh4jGd9CU5283DiiLiHo5LWAE5zY
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation