cc9b42305f1631fa3bac94d97d92bf7e796223c4eaad1afb408efa790492fbeb | Triage

Sharing

General

Target

841c8f04c0096eebebf894bb42fecf7e_JaffaCakes118
Size

88KB
Sample

240810-ajc3jazhlg
MD5

841c8f04c0096eebebf894bb42fecf7e
SHA1

2819e07e7f5689a83a28ca7397a81080aa8c687f
SHA256

cc9b42305f1631fa3bac94d97d92bf7e796223c4eaad1afb408efa790492fbeb
SHA512

b1fa1c9ffd8a1c8394e18aceeb29ae330111ab0a5185170510eea3ca567d9ea7550c397669a5ec190fc07bf8a2a2cd15793960460819e5f089f5f6d5898963c4
SSDEEP

1536:gphRgNK48a/PT/F1BiRA39iQif0evp7e1e4OrUiaRiEuCmcDSe0Cuo4QLHoT:KheNK4NPTVODrDp7Se4OrBa/uCmcDSbZ

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  841c8f04c0096eebebf894bb42fecf7e_JaffaCakes118
- Size
  
  88KB
- MD5
  
  841c8f04c0096eebebf894bb42fecf7e
- SHA1
  
  2819e07e7f5689a83a28ca7397a81080aa8c687f
- SHA256
  
  cc9b42305f1631fa3bac94d97d92bf7e796223c4eaad1afb408efa790492fbeb
- SHA512
  
  b1fa1c9ffd8a1c8394e18aceeb29ae330111ab0a5185170510eea3ca567d9ea7550c397669a5ec190fc07bf8a2a2cd15793960460819e5f089f5f6d5898963c4
- SSDEEP
  
  1536:gphRgNK48a/PT/F1BiRA39iQif0evp7e1e4OrUiaRiEuCmcDSe0Cuo4QLHoT:KheNK4NPTVODrDp7Se4OrBa/uCmcDSbZ
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation