Overview

overview

8

Static

static

3

72541b5dee...18.exe

windows7-x64

8

72541b5dee...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72541b5dee71e31eb5eb062b44f56a2e_JaffaCakes118

  • Size

    41KB

  • Sample

    240726-ddaa8ssaqp

  • MD5

    72541b5dee71e31eb5eb062b44f56a2e

  • SHA1

    102f81f536760b62c722f4b18d2541fff595cf13

  • SHA256

    0d68dec705f3cc9159c4ddfe1135e5ddbc37f86da7f461de64b6374d2d289131

  • SHA512

    8721a5eaf66857ae14b227185075b1fc4190eadf831485e34c835ff832cfc370d480ad03a37e252c427a00be234852d2ff03106abe4b61e016ea9657702d5b95

  • SSDEEP

    768:uL2eV2s1qhympAJB9dOat8XUEGlfBP2xtcOMdeZczlU3AIGIZj7oXiipI6g8gGm2:ujIsE+L7Oat8XURqoOMsqSw8oSipI6gS

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      72541b5dee71e31eb5eb062b44f56a2e_JaffaCakes118

    • Size

      41KB

    • MD5

      72541b5dee71e31eb5eb062b44f56a2e

    • SHA1

      102f81f536760b62c722f4b18d2541fff595cf13

    • SHA256

      0d68dec705f3cc9159c4ddfe1135e5ddbc37f86da7f461de64b6374d2d289131

    • SHA512

      8721a5eaf66857ae14b227185075b1fc4190eadf831485e34c835ff832cfc370d480ad03a37e252c427a00be234852d2ff03106abe4b61e016ea9657702d5b95

    • SSDEEP

      768:uL2eV2s1qhympAJB9dOat8XUEGlfBP2xtcOMdeZczlU3AIGIZj7oXiipI6g8gGm2:ujIsE+L7Oat8XURqoOMsqSw8oSipI6gS

    Score
    8/10
    persistenceprivilege_escalationdiscovery

    • Event Triggered Execution: AppCert DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.

      persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks