a74bf22e47c20c78518b9af30bf27f0d2fd44da2dbfb2f9c1a377298e91f31a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118
Size

28KB
Sample

240715-jtv6jawdkr
MD5

48e60a9ca7d86276d242e1281a0051e2
SHA1

512fb797deec1dd4e6f132879b3df96e26d836f7
SHA256

a74bf22e47c20c78518b9af30bf27f0d2fd44da2dbfb2f9c1a377298e91f31a0
SHA512

08a6841fe68ee9363d74544c1b4178a18663c69799b1c34c89d51f3967ba5e1095d3f00415121486ef4fe9fae483d49efd1ea910a289e56ce7c804fab30d986f
SSDEEP

384:T75JH9HFE7kv3Fhm0aP/iT8BB2onW5wfnRcB3OQ8E03HJAeWzFUKZa:3E7Ozm038vnWgnRcBeQ8rCzpUKk

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118
- Size
  
  28KB
- MD5
  
  48e60a9ca7d86276d242e1281a0051e2
- SHA1
  
  512fb797deec1dd4e6f132879b3df96e26d836f7
- SHA256
  
  a74bf22e47c20c78518b9af30bf27f0d2fd44da2dbfb2f9c1a377298e91f31a0
- SHA512
  
  08a6841fe68ee9363d74544c1b4178a18663c69799b1c34c89d51f3967ba5e1095d3f00415121486ef4fe9fae483d49efd1ea910a289e56ce7c804fab30d986f
- SSDEEP
  
  384:T75JH9HFE7kv3Fhm0aP/iT8BB2onW5wfnRcB3OQ8E03HJAeWzFUKZa:3E7Ozm038vnWgnRcBeQ8rCzpUKk
Score

7^/10

persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2