d5187243a0c6cf2e948eed87f0723edcccf092788e8af5b89c6c37eb3edfac2d | Triage

Sharing

General

Target

6066598444a93a0a3b20a2dae97046ac_JaffaCakes118
Size

88KB
Sample

240720-3dbazasaqm
MD5

6066598444a93a0a3b20a2dae97046ac
SHA1

2805c346422b4326b174b319a0f8703eb4efc582
SHA256

d5187243a0c6cf2e948eed87f0723edcccf092788e8af5b89c6c37eb3edfac2d
SHA512

950a762584ccc180b6bdceb1dc03f2c6416f114f803d12ed18d594acdb4b1d9faad5961cab8f55b33cdf1306f0f1d3c100239e13d5cf57071170483975edd8be
SSDEEP

1536:VvfGUlSv40NhN4mnSoY/fUwl1bGUtcPEFqJQGjinJHGYHoJ8JlIU:VvfGUgvrhLJSbJtcPixZBVHoGJlIU

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  6066598444a93a0a3b20a2dae97046ac_JaffaCakes118
- Size
  
  88KB
- MD5
  
  6066598444a93a0a3b20a2dae97046ac
- SHA1
  
  2805c346422b4326b174b319a0f8703eb4efc582
- SHA256
  
  d5187243a0c6cf2e948eed87f0723edcccf092788e8af5b89c6c37eb3edfac2d
- SHA512
  
  950a762584ccc180b6bdceb1dc03f2c6416f114f803d12ed18d594acdb4b1d9faad5961cab8f55b33cdf1306f0f1d3c100239e13d5cf57071170483975edd8be
- SSDEEP
  
  1536:VvfGUlSv40NhN4mnSoY/fUwl1bGUtcPEFqJQGjinJHGYHoJ8JlIU:VvfGUgvrhLJSbJtcPixZBVHoGJlIU
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation