Overview

overview

8

Static

static

3

459f20db2b...18.exe

windows7-x64

459f20db2b...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    459f20db2b4642427b11f233fe3778f2_JaffaCakes118

  • Size

    100KB

  • Sample

    240714-nlvx1s1cnc

  • MD5

    459f20db2b4642427b11f233fe3778f2

  • SHA1

    d11f2ed882306811935bc5855d4324f328abedf4

  • SHA256

    124c17fc25f28a0d30475b7649217fbd153727e832c6cbafe3a079806c6aaab7

  • SHA512

    b47a2fd42e83d861a78c8bac87be988012391674e57d194851e764062d5fa24814af93be2f8ebc43e4bc466426f005ef0e96df7cc67e6adcf52208bbb4e84910

  • SSDEEP

    3072:aSG/n/IpnsXP/eb/GTez7QJgnKaYY9Wqfgo2Y:OI6Heb/YSQE79W7Y

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      459f20db2b4642427b11f233fe3778f2_JaffaCakes118

    • Size

      100KB

    • MD5

      459f20db2b4642427b11f233fe3778f2

    • SHA1

      d11f2ed882306811935bc5855d4324f328abedf4

    • SHA256

      124c17fc25f28a0d30475b7649217fbd153727e832c6cbafe3a079806c6aaab7

    • SHA512

      b47a2fd42e83d861a78c8bac87be988012391674e57d194851e764062d5fa24814af93be2f8ebc43e4bc466426f005ef0e96df7cc67e6adcf52208bbb4e84910

    • SSDEEP

      3072:aSG/n/IpnsXP/eb/GTez7QJgnKaYY9Wqfgo2Y:OI6Heb/YSQE79W7Y

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks