7d3b0e88dfddbbf99ac13df5b12d0ef826b357430f1ea4c867f83e2d4ec7ddea | Triage

Sharing

General

Target

6556199a37f448d028845e5143dfdec0_JaffaCakes118
Size

88KB
Sample

240722-31h94awfqk
MD5

6556199a37f448d028845e5143dfdec0
SHA1

af6f51cc6033cb7956d457d41f3a633cfc4597c2
SHA256

7d3b0e88dfddbbf99ac13df5b12d0ef826b357430f1ea4c867f83e2d4ec7ddea
SHA512

27e1d7dcf1be83b915cba182feca4cd82eaf9ccd2950bea63ddd33986c7355f0cf08899994bcabc1d7070b40aca781c9a065c1c698af17ec4ad5b86987756bac
SSDEEP

1536:D0rPIBGLiP9Sw543iM5xlTOeVue9iEEEC7xZopSluTHT9KoTJlIU:DsIhPL54375xUhBEC7oEkrhKoTJlIU

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  6556199a37f448d028845e5143dfdec0_JaffaCakes118
- Size
  
  88KB
- MD5
  
  6556199a37f448d028845e5143dfdec0
- SHA1
  
  af6f51cc6033cb7956d457d41f3a633cfc4597c2
- SHA256
  
  7d3b0e88dfddbbf99ac13df5b12d0ef826b357430f1ea4c867f83e2d4ec7ddea
- SHA512
  
  27e1d7dcf1be83b915cba182feca4cd82eaf9ccd2950bea63ddd33986c7355f0cf08899994bcabc1d7070b40aca781c9a065c1c698af17ec4ad5b86987756bac
- SSDEEP
  
  1536:D0rPIBGLiP9Sw543iM5xlTOeVue9iEEEC7xZopSluTHT9KoTJlIU:DsIhPL54375xUhBEC7oEkrhKoTJlIU
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation