b6c224c727a0a90330de3de6638d588874f10904f4d6bedcd21d4c0a83ed6935 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118
Size

36KB
Sample

240723-ca85qa1brc
MD5

65b0c7d344ef6b11edcedf57c2331f90
SHA1

6fa025537cf51888accd6ded288374f1c9f1da21
SHA256

b6c224c727a0a90330de3de6638d588874f10904f4d6bedcd21d4c0a83ed6935
SHA512

7075e8e9b07fe86bb25b7536e53f56fd1cda3edc20180c5cd46293f00fd1dfe0cde809c7ff4b222e912493acbea2a28d05a998f4c6e05ab4b936f20250198e2f
SSDEEP

768:MP6S31Ek3FVC8jwVPknVMiFbug1g6bm0/z4Ql8:M1xVCRPyVGMtz4Ql8

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118
- Size
  
  36KB
- MD5
  
  65b0c7d344ef6b11edcedf57c2331f90
- SHA1
  
  6fa025537cf51888accd6ded288374f1c9f1da21
- SHA256
  
  b6c224c727a0a90330de3de6638d588874f10904f4d6bedcd21d4c0a83ed6935
- SHA512
  
  7075e8e9b07fe86bb25b7536e53f56fd1cda3edc20180c5cd46293f00fd1dfe0cde809c7ff4b222e912493acbea2a28d05a998f4c6e05ab4b936f20250198e2f
- SSDEEP
  
  768:MP6S31Ek3FVC8jwVPknVMiFbug1g6bm0/z4Ql8:M1xVCRPyVGMtz4Ql8
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppCert DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppCert DLLs

Privilege Escalation

Event Triggered Execution

AppCert DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2