b29b6347fd602b19cda40e4148e82d63ea781c47758902dd4c1206c1be10dcd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73d234efb106390c9346202c0fce6c1c_JaffaCakes118
Size

92KB
Sample

240726-ndlpdayaqf
MD5

73d234efb106390c9346202c0fce6c1c
SHA1

494c3dae62db10ae470f1a380bf7c2b2d216f6a8
SHA256

b29b6347fd602b19cda40e4148e82d63ea781c47758902dd4c1206c1be10dcd4
SHA512

f6e73a8aa9e38d48c34c224f2feb75a11adddfcee0884d9c015ebcdf8643a543f74b6fb62b7a93794a8548d37ba4bb202d1eb123244fec28787c73a148e2227f
SSDEEP

1536:IeG+dsqKTY/HSloA5Vj40ZIjPb7skoxMWNLzMo:U0v/HSloAU0abs5xxlzMo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  73d234efb106390c9346202c0fce6c1c_JaffaCakes118
- Size
  
  92KB
- MD5
  
  73d234efb106390c9346202c0fce6c1c
- SHA1
  
  494c3dae62db10ae470f1a380bf7c2b2d216f6a8
- SHA256
  
  b29b6347fd602b19cda40e4148e82d63ea781c47758902dd4c1206c1be10dcd4
- SHA512
  
  f6e73a8aa9e38d48c34c224f2feb75a11adddfcee0884d9c015ebcdf8643a543f74b6fb62b7a93794a8548d37ba4bb202d1eb123244fec28787c73a148e2227f
- SSDEEP
  
  1536:IeG+dsqKTY/HSloA5Vj40ZIjPb7skoxMWNLzMo:U0v/HSloAU0abs5xxlzMo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation