57860d5370ff33cb890201f00313188cd1154c2966ee2c2cca4af03b3d3111c4 | Triage

Sharing

General

Target

65386bdfff2029242d9278172eb5122b_JaffaCakes118
Size

92KB
Sample

240722-3dnajavejl
MD5

65386bdfff2029242d9278172eb5122b
SHA1

9ec64ebaa6e91ac38558db4f740a26bc6079c5ed
SHA256

57860d5370ff33cb890201f00313188cd1154c2966ee2c2cca4af03b3d3111c4
SHA512

da8348369f6c498d20adf2fb5e261c3ced588bb08571c3a83ff334d900fc5df0fd6c6a6524430b00ab86507f195be5924500f0ca948f27b58dcb1a13fd10a36c
SSDEEP

1536:ubZQ67V0P2fdNqmQtIx2m4RR6jefMHzqBUvNgAEhEacLfHwzGo:ubZQ67Zfnqmkm4RQfHzqzyacszGo

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  65386bdfff2029242d9278172eb5122b_JaffaCakes118
- Size
  
  92KB
- MD5
  
  65386bdfff2029242d9278172eb5122b
- SHA1
  
  9ec64ebaa6e91ac38558db4f740a26bc6079c5ed
- SHA256
  
  57860d5370ff33cb890201f00313188cd1154c2966ee2c2cca4af03b3d3111c4
- SHA512
  
  da8348369f6c498d20adf2fb5e261c3ced588bb08571c3a83ff334d900fc5df0fd6c6a6524430b00ab86507f195be5924500f0ca948f27b58dcb1a13fd10a36c
- SSDEEP
  
  1536:ubZQ67V0P2fdNqmQtIx2m4RR6jefMHzqBUvNgAEhEacLfHwzGo:ubZQ67Zfnqmkm4RQfHzqzyacszGo
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation