c81b848bbf8b44e396f1eac1378deaa9757593c2d003ecc61d90fe11f256e058 | Triage

Sharing

General

Target

40f287b6a07e873f15adc7dcd0b09579_JaffaCakes118
Size

116KB
Sample

240713-kgylkatfjn
MD5

40f287b6a07e873f15adc7dcd0b09579
SHA1

6c1c2b0de086d9fb9ba6742001eccbe51850e299
SHA256

c81b848bbf8b44e396f1eac1378deaa9757593c2d003ecc61d90fe11f256e058
SHA512

633c95ab9143820465c8852ccd7f9f14743ec93da0511d9155bcc06901932c1830ae43c8e5fb3e3eb57647e729095e66cec561f02b56f43d8756b9d4b8bb7edd
SSDEEP

1536:inbNyoVQ5mo7bVcUV4GZsDMqEuJDvJ8nSTzxPKfo7ykZa8zyu2ELn02Xq2b:aNHVFo7C6sDMqrvanoKwUg02Xq2b

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  40f287b6a07e873f15adc7dcd0b09579_JaffaCakes118
- Size
  
  116KB
- MD5
  
  40f287b6a07e873f15adc7dcd0b09579
- SHA1
  
  6c1c2b0de086d9fb9ba6742001eccbe51850e299
- SHA256
  
  c81b848bbf8b44e396f1eac1378deaa9757593c2d003ecc61d90fe11f256e058
- SHA512
  
  633c95ab9143820465c8852ccd7f9f14743ec93da0511d9155bcc06901932c1830ae43c8e5fb3e3eb57647e729095e66cec561f02b56f43d8756b9d4b8bb7edd
- SSDEEP
  
  1536:inbNyoVQ5mo7bVcUV4GZsDMqEuJDvJ8nSTzxPKfo7ykZa8zyu2ELn02Xq2b:aNHVFo7C6sDMqrvanoKwUg02Xq2b
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation