728e04ff318ed4b166e290c39f863d8a66050ede0d2037ac1fdd1462fe02993c | Triage

Sharing

General

Target

87de1da01c3d6820fc3b75ca8ec20129_JaffaCakes118
Size

92KB
Sample

240810-13dfhsvdlf
MD5

87de1da01c3d6820fc3b75ca8ec20129
SHA1

b2c0afbca3b39d96eee6d2265806d11a67dbdd86
SHA256

728e04ff318ed4b166e290c39f863d8a66050ede0d2037ac1fdd1462fe02993c
SHA512

d8cd815a0b54cb2b93a5b031dd9d1de6e6e9db0661cc5a6e643316511a9a18b9d407235b2a3eb9fae71d3cbdea670f0f18ef581b9a92c72c0f1b3f5678710983
SSDEEP

1536:ZFFWp/jMjDwGydaJ654mJnq8nqaZsb9Z1ROG87gqK+PKoUJlIU:Zqp/4jEJac5Lnq8nqaO5rsHg9yKoUJlz

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  87de1da01c3d6820fc3b75ca8ec20129_JaffaCakes118
- Size
  
  92KB
- MD5
  
  87de1da01c3d6820fc3b75ca8ec20129
- SHA1
  
  b2c0afbca3b39d96eee6d2265806d11a67dbdd86
- SHA256
  
  728e04ff318ed4b166e290c39f863d8a66050ede0d2037ac1fdd1462fe02993c
- SHA512
  
  d8cd815a0b54cb2b93a5b031dd9d1de6e6e9db0661cc5a6e643316511a9a18b9d407235b2a3eb9fae71d3cbdea670f0f18ef581b9a92c72c0f1b3f5678710983
- SSDEEP
  
  1536:ZFFWp/jMjDwGydaJ654mJnq8nqaZsb9Z1ROG87gqK+PKoUJlIU:Zqp/4jEJac5Lnq8nqaO5rsHg9yKoUJlz
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation