Overview

overview

8

Static

static

3

5fa3d4b37a...18.exe

windows7-x64

5fa3d4b37a...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fa3d4b37a24b2942915e5cdf890a738_JaffaCakes118

  • Size

    88KB

  • Sample

    240720-jqg5hatajj

  • MD5

    5fa3d4b37a24b2942915e5cdf890a738

  • SHA1

    210e306e0bea6b7a1b38c479949ea2a8caa641e6

  • SHA256

    3fe56ddc331987f577b8ca255a4ce1614644a6ed91f2b469ce9f07cf7a187c2c

  • SHA512

    578cd90fc7225d93f9a6053078eb8ee7deaff94b60aa7d576e07b4874e2ac15500dd70de7e757e03a7e4f63e843be7e3999ebe17c004dcd56584f2c4d4d2a185

  • SSDEEP

    1536:Vnpo+QCJAENdnsSIsfGW9lV258KUwkNdyK6nB1DGlEEEC7xZopSluTHT9KoTJlIU:VnpKrUQsfGWLV+Ub0K6nB1DGlBEC7oEG

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      5fa3d4b37a24b2942915e5cdf890a738_JaffaCakes118

    • Size

      88KB

    • MD5

      5fa3d4b37a24b2942915e5cdf890a738

    • SHA1

      210e306e0bea6b7a1b38c479949ea2a8caa641e6

    • SHA256

      3fe56ddc331987f577b8ca255a4ce1614644a6ed91f2b469ce9f07cf7a187c2c

    • SHA512

      578cd90fc7225d93f9a6053078eb8ee7deaff94b60aa7d576e07b4874e2ac15500dd70de7e757e03a7e4f63e843be7e3999ebe17c004dcd56584f2c4d4d2a185

    • SSDEEP

      1536:Vnpo+QCJAENdnsSIsfGW9lV258KUwkNdyK6nB1DGlEEEC7xZopSluTHT9KoTJlIU:VnpKrUQsfGWLV+Ub0K6nB1DGlBEC7oEG

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks