1d86b38ce618538449f874d99b5d270ebda0b5bdd0b8decc4a02a7911edd4d68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440c6765c6e880adc61a9619d9b9de7a_JaffaCakes118
Size

79KB
Sample

240714-dnmz3sxapg
MD5

440c6765c6e880adc61a9619d9b9de7a
SHA1

eb5a0bcb26924e8b6f9663d4a84ad576801c9664
SHA256

1d86b38ce618538449f874d99b5d270ebda0b5bdd0b8decc4a02a7911edd4d68
SHA512

d358da280e2d406a283abafb84955c35889e19a7403bfabf2b844171eb5a95836c53b05eb89c003016d44bd00781052d47276fa198ffadf7bbc1f53253f5d18d
SSDEEP

1536:U41e61VqU5F+hK2XEqrLLKHxn/xHY7MAks0OXOjL40BStAmjPonJlIK:9FuBrLuRn/x47M1Oef4gSOAPonJlIK

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  440c6765c6e880adc61a9619d9b9de7a_JaffaCakes118
- Size
  
  79KB
- MD5
  
  440c6765c6e880adc61a9619d9b9de7a
- SHA1
  
  eb5a0bcb26924e8b6f9663d4a84ad576801c9664
- SHA256
  
  1d86b38ce618538449f874d99b5d270ebda0b5bdd0b8decc4a02a7911edd4d68
- SHA512
  
  d358da280e2d406a283abafb84955c35889e19a7403bfabf2b844171eb5a95836c53b05eb89c003016d44bd00781052d47276fa198ffadf7bbc1f53253f5d18d
- SSDEEP
  
  1536:U41e61VqU5F+hK2XEqrLLKHxn/xHY7MAks0OXOjL40BStAmjPonJlIK:9FuBrLuRn/x47M1Oef4gSOAPonJlIK
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation