dca931dae24892b4812ce9ecea27c7aa7bd95f32608481496233235a9b85f60c | Triage

Sharing

General

Target

4d42b743e97c54140a25c1bf86583779_JaffaCakes118
Size

92KB
Sample

240716-hv3fkashpb
MD5

4d42b743e97c54140a25c1bf86583779
SHA1

799606085c3f658e3d74d1bbad33f035be28dd8f
SHA256

dca931dae24892b4812ce9ecea27c7aa7bd95f32608481496233235a9b85f60c
SHA512

b74ce7a46088bb25b76f3a1a80114b5d924ba4d1fe1e0dae4d95eae5c51927ddc22d238f80f82ba748598c79a2ce5c7f69c51841de8edb66cc4d70723f3d4533
SSDEEP

1536:Ce81gKf2uGE1gs1lqX9sXkMD1egPlyMb1YmAEhEacLfHwzGo:CZ1gKf20xlm9sXxRNkMb1Y8yacszGo

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  4d42b743e97c54140a25c1bf86583779_JaffaCakes118
- Size
  
  92KB
- MD5
  
  4d42b743e97c54140a25c1bf86583779
- SHA1
  
  799606085c3f658e3d74d1bbad33f035be28dd8f
- SHA256
  
  dca931dae24892b4812ce9ecea27c7aa7bd95f32608481496233235a9b85f60c
- SHA512
  
  b74ce7a46088bb25b76f3a1a80114b5d924ba4d1fe1e0dae4d95eae5c51927ddc22d238f80f82ba748598c79a2ce5c7f69c51841de8edb66cc4d70723f3d4533
- SSDEEP
  
  1536:Ce81gKf2uGE1gs1lqX9sXkMD1egPlyMb1YmAEhEacLfHwzGo:CZ1gKf20xlm9sXxRNkMb1Y8yacszGo
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation