Overview

overview

8

Static

static

3

634828324f...18.exe

windows7-x64

634828324f...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    634828324f07e17a407dcffa5c7ad95a_JaffaCakes118

  • Size

    79KB

  • Sample

    240722-qakc9aycjd

  • MD5

    634828324f07e17a407dcffa5c7ad95a

  • SHA1

    cd820ed9103e8c357c28704d00c3a2a03c72710c

  • SHA256

    c60276e170807342182a6f891aee6558210ccb1af5c7c26accfb7658c7e30316

  • SHA512

    6dffc11829968002ebeaf23611df9c1d62193f0deebe7fcbc384e1e99f0cd1ac187e822f7ae18d036a1539ace0f0e6a630733b0ad44a6004e7cc20bb567cef5c

  • SSDEEP

    1536:6wrQKisHwA7lzyHAgjJKSRp+IP+D98UlPOjaAoHJlIK:rQyQSlzyHAYc88I0VPzAoHJlIK

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      634828324f07e17a407dcffa5c7ad95a_JaffaCakes118

    • Size

      79KB

    • MD5

      634828324f07e17a407dcffa5c7ad95a

    • SHA1

      cd820ed9103e8c357c28704d00c3a2a03c72710c

    • SHA256

      c60276e170807342182a6f891aee6558210ccb1af5c7c26accfb7658c7e30316

    • SHA512

      6dffc11829968002ebeaf23611df9c1d62193f0deebe7fcbc384e1e99f0cd1ac187e822f7ae18d036a1539ace0f0e6a630733b0ad44a6004e7cc20bb567cef5c

    • SSDEEP

      1536:6wrQKisHwA7lzyHAgjJKSRp+IP+D98UlPOjaAoHJlIK:rQyQSlzyHAYc88I0VPzAoHJlIK

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks