5c213a8d5d434f0ea673e671c3e4eb9d7287d805ef4c1c243bc592346a9688d6 | Triage

Sharing

General

Target

6f08b0294e6093a668a12bfb7005fab7_JaffaCakes118
Size

104KB
Sample

240725-ljzgba1cmn
MD5

6f08b0294e6093a668a12bfb7005fab7
SHA1

c6a4f982b61f3411309e8102a17c6c24355c1068
SHA256

5c213a8d5d434f0ea673e671c3e4eb9d7287d805ef4c1c243bc592346a9688d6
SHA512

045f89d3e45af3aa0f083d2ba554dad730bf1bb24a38c1889d155fa1b00a92e15ff728255e7fab62968462917a8a944788b92bde369ec297f5df163f20f1ae2e
SSDEEP

1536:MJ/5Su4pUSpoy4Ov+31eyRM1iyWWv5VYy/U2uphvV0ceu+nBgyoDPj6mQ:Mdg1qZ01bW25rerebBgyoD0

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  6f08b0294e6093a668a12bfb7005fab7_JaffaCakes118
- Size
  
  104KB
- MD5
  
  6f08b0294e6093a668a12bfb7005fab7
- SHA1
  
  c6a4f982b61f3411309e8102a17c6c24355c1068
- SHA256
  
  5c213a8d5d434f0ea673e671c3e4eb9d7287d805ef4c1c243bc592346a9688d6
- SHA512
  
  045f89d3e45af3aa0f083d2ba554dad730bf1bb24a38c1889d155fa1b00a92e15ff728255e7fab62968462917a8a944788b92bde369ec297f5df163f20f1ae2e
- SSDEEP
  
  1536:MJ/5Su4pUSpoy4Ov+31eyRM1iyWWv5VYy/U2uphvV0ceu+nBgyoDPj6mQ:Mdg1qZ01bW25rerebBgyoD0
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation