4350c197167001f1cc173c13c9db9a015c33e5d66a1e615a8ae97197375dcfd0 | Triage

Sharing

General

Target

40ac8ee8f005616d31a71a583f045f98_JaffaCakes118
Size

78KB
Sample

240713-hyk1patape
MD5

40ac8ee8f005616d31a71a583f045f98
SHA1

5d5268a2993b651698dc77d90c3461dfe09e2f51
SHA256

4350c197167001f1cc173c13c9db9a015c33e5d66a1e615a8ae97197375dcfd0
SHA512

e3fb1d47d0a1744c2071ea77dbba457d87a9cae7bc57bf37d3e7b4917617c2cf4b17d87808bad78fdb4c93171da4d292db2991337b05fc7f83b9998925a6ebe2
SSDEEP

1536:1WG/ez+XQj9+RUuv2imHFeoS62jT6ZEU1DpgmRAoKJlIK:NXW9YRuFe8qgrpRRAoKJlIK

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  40ac8ee8f005616d31a71a583f045f98_JaffaCakes118
- Size
  
  78KB
- MD5
  
  40ac8ee8f005616d31a71a583f045f98
- SHA1
  
  5d5268a2993b651698dc77d90c3461dfe09e2f51
- SHA256
  
  4350c197167001f1cc173c13c9db9a015c33e5d66a1e615a8ae97197375dcfd0
- SHA512
  
  e3fb1d47d0a1744c2071ea77dbba457d87a9cae7bc57bf37d3e7b4917617c2cf4b17d87808bad78fdb4c93171da4d292db2991337b05fc7f83b9998925a6ebe2
- SSDEEP
  
  1536:1WG/ez+XQj9+RUuv2imHFeoS62jT6ZEU1DpgmRAoKJlIK:NXW9YRuFe8qgrpRRAoKJlIK
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation