2852a6bd5040ad33068479106773afe3216183774cdb22ab32f61cbcec3e2424 | Triage

Sharing

General

Target

86d4682b950571a710e1822b1625b09b_JaffaCakes118
Size

92KB
Sample

240810-t4m8saxgrk
MD5

86d4682b950571a710e1822b1625b09b
SHA1

ba2f388d59602b3499a5c7a221f63e22a80b07e9
SHA256

2852a6bd5040ad33068479106773afe3216183774cdb22ab32f61cbcec3e2424
SHA512

4a685be316e76f2e4b2f53118a5075373492f0d53280c33357b3278eb4cd8c5663626b5b60f35849e6e7f6776e6c539fdec6a73f2e54c3e33c44eb61e78831e8
SSDEEP

1536:vomM/9upDIRyIOsdlgrCjnLqwqW+bVBZrYV0oD8e:zM6WLmDhVB60og

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  86d4682b950571a710e1822b1625b09b_JaffaCakes118
- Size
  
  92KB
- MD5
  
  86d4682b950571a710e1822b1625b09b
- SHA1
  
  ba2f388d59602b3499a5c7a221f63e22a80b07e9
- SHA256
  
  2852a6bd5040ad33068479106773afe3216183774cdb22ab32f61cbcec3e2424
- SHA512
  
  4a685be316e76f2e4b2f53118a5075373492f0d53280c33357b3278eb4cd8c5663626b5b60f35849e6e7f6776e6c539fdec6a73f2e54c3e33c44eb61e78831e8
- SSDEEP
  
  1536:vomM/9upDIRyIOsdlgrCjnLqwqW+bVBZrYV0oD8e:zM6WLmDhVB60og
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation