2abf83978c28f33fd5d6e0183629dc1a7865b276ce7216dc454272b7a0bb3c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47e828799fafda91b368227e526a865b_JaffaCakes118
Size

92KB
Sample

240715-ddr62svcnr
MD5

47e828799fafda91b368227e526a865b
SHA1

273dfd5f875de3b8e42b66802a60bfeee5bada1d
SHA256

2abf83978c28f33fd5d6e0183629dc1a7865b276ce7216dc454272b7a0bb3c65
SHA512

dc707eedcc9cf3cf19a141770d69bbdaeb0d776b1b1799a0b15500372622536b344d3b5bc3f0ad6fe2727d4730d9fa21c73a7ff88ad1d43262f0f09bab0c0419
SSDEEP

1536:ewqpxrjYnTm5gkdAPXg5vx660/uhvNVkM9nGrd5ezAEhEacLfHwzGo:mrukePAp6t/WvNuM9yd5KyacszGo

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  47e828799fafda91b368227e526a865b_JaffaCakes118
- Size
  
  92KB
- MD5
  
  47e828799fafda91b368227e526a865b
- SHA1
  
  273dfd5f875de3b8e42b66802a60bfeee5bada1d
- SHA256
  
  2abf83978c28f33fd5d6e0183629dc1a7865b276ce7216dc454272b7a0bb3c65
- SHA512
  
  dc707eedcc9cf3cf19a141770d69bbdaeb0d776b1b1799a0b15500372622536b344d3b5bc3f0ad6fe2727d4730d9fa21c73a7ff88ad1d43262f0f09bab0c0419
- SSDEEP
  
  1536:ewqpxrjYnTm5gkdAPXg5vx660/uhvNVkM9nGrd5ezAEhEacLfHwzGo:mrukePAp6t/WvNuM9yd5KyacszGo
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation