f065f76e6e003859970631f02b3d8ee4ab6c15c92d23ad226537a1b6796eedd8 | Triage

Sharing

General

Target

76398017aa0d4d7108c29fad6e1ffabd_JaffaCakes118
Size

88KB
Sample

240726-3ntkasscjp
MD5

76398017aa0d4d7108c29fad6e1ffabd
SHA1

b88150536553a97d97591d03d31ffbdfae747735
SHA256

f065f76e6e003859970631f02b3d8ee4ab6c15c92d23ad226537a1b6796eedd8
SHA512

e329f31adad227e374c26a2f69968912457339ef417a2b5ebebf3e3f84158e0dd6aef281483297ec087a483e9b621961b4e7e802c6d43551961a5200ee154729
SSDEEP

1536:yruA2/jlnftMHlX8t1x2arMA0iS3w0eS1fuE4ZEEEC7xZopSluTHT9KoTJlIU:oSbpOlX8AaQOoR4ZBEC7oEkrhKoTJlIU

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  76398017aa0d4d7108c29fad6e1ffabd_JaffaCakes118
- Size
  
  88KB
- MD5
  
  76398017aa0d4d7108c29fad6e1ffabd
- SHA1
  
  b88150536553a97d97591d03d31ffbdfae747735
- SHA256
  
  f065f76e6e003859970631f02b3d8ee4ab6c15c92d23ad226537a1b6796eedd8
- SHA512
  
  e329f31adad227e374c26a2f69968912457339ef417a2b5ebebf3e3f84158e0dd6aef281483297ec087a483e9b621961b4e7e802c6d43551961a5200ee154729
- SSDEEP
  
  1536:yruA2/jlnftMHlX8t1x2arMA0iS3w0eS1fuE4ZEEEC7xZopSluTHT9KoTJlIU:oSbpOlX8AaQOoR4ZBEC7oEkrhKoTJlIU
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation