Overview

overview

8

Static

static

3

67ff56183c...18.exe

windows7-x64

67ff56183c...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    67ff56183cd2c1ef10a4ae9fe568c632_JaffaCakes118

  • Size

    92KB

  • Sample

    240723-r5b6ssvhkp

  • MD5

    67ff56183cd2c1ef10a4ae9fe568c632

  • SHA1

    c39df7e9fb8ded11c8b40db1f11f25da66b2bec5

  • SHA256

    f96faa9eeb937cdfa2b6336eac240440a81a62b14bcc1862f1b0993a9c020702

  • SHA512

    018579d3e5694ed322d3f55f58e321896af1d6919fe4e184518e372029625477fa07506543df7d5055373123826e179b5730d40f1c53f70d15cd0602a0fb2146

  • SSDEEP

    1536:F47oTdMKBjuTeo4C4SFZtpDNDsdyZ6ep9U6OzYoq2chciMqIVqOj8FIGoCJlIU:22dM+qTH4CtFX1dsd09U6Osg0tMqcqO6

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      67ff56183cd2c1ef10a4ae9fe568c632_JaffaCakes118

    • Size

      92KB

    • MD5

      67ff56183cd2c1ef10a4ae9fe568c632

    • SHA1

      c39df7e9fb8ded11c8b40db1f11f25da66b2bec5

    • SHA256

      f96faa9eeb937cdfa2b6336eac240440a81a62b14bcc1862f1b0993a9c020702

    • SHA512

      018579d3e5694ed322d3f55f58e321896af1d6919fe4e184518e372029625477fa07506543df7d5055373123826e179b5730d40f1c53f70d15cd0602a0fb2146

    • SSDEEP

      1536:F47oTdMKBjuTeo4C4SFZtpDNDsdyZ6ep9U6OzYoq2chciMqIVqOj8FIGoCJlIU:22dM+qTH4CtFX1dsd09U6Osg0tMqcqO6

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks