68c08bfb0605ce46ef44f91d2fe14aefbd2425b4ced764da8fc463913d9e555f | Triage

Sharing

General

Target

8d3e0e2ee1d80e2ec9545abbc6263a15_JaffaCakes118
Size

92KB
Sample

240812-emvtzavbmn
MD5

8d3e0e2ee1d80e2ec9545abbc6263a15
SHA1

6da2e9397565d60a43048802af0f42305fa2a015
SHA256

68c08bfb0605ce46ef44f91d2fe14aefbd2425b4ced764da8fc463913d9e555f
SHA512

74a2043941b522869779a9e5a8bc6ff0fd115042e8d6bc05d505a8ba4b14933e7d26dbade4443038242e7fbd6e2955375bbe7b2c00a667f552c2bb2c44512580
SSDEEP

1536:elV7zYTLnxXFqYYufnKniAleALywoxMWNLzMo:60LxXNfKniVAcxxlzMo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  8d3e0e2ee1d80e2ec9545abbc6263a15_JaffaCakes118
- Size
  
  92KB
- MD5
  
  8d3e0e2ee1d80e2ec9545abbc6263a15
- SHA1
  
  6da2e9397565d60a43048802af0f42305fa2a015
- SHA256
  
  68c08bfb0605ce46ef44f91d2fe14aefbd2425b4ced764da8fc463913d9e555f
- SHA512
  
  74a2043941b522869779a9e5a8bc6ff0fd115042e8d6bc05d505a8ba4b14933e7d26dbade4443038242e7fbd6e2955375bbe7b2c00a667f552c2bb2c44512580
- SSDEEP
  
  1536:elV7zYTLnxXFqYYufnKniAleALywoxMWNLzMo:60LxXNfKniVAcxxlzMo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation