0099ebb09a5ac4f83cd5cf36e9f070b8585c5ec7eff07d0fc97a419dad5282ca | Triage

Sharing

General

Target

8e11f222a8330a46c9108c48d4a21062_JaffaCakes118
Size

48KB
Sample

240812-km4prsxgmh
MD5

8e11f222a8330a46c9108c48d4a21062
SHA1

eae359eac46fa216d42382a533a64f4a3b47e2f8
SHA256

0099ebb09a5ac4f83cd5cf36e9f070b8585c5ec7eff07d0fc97a419dad5282ca
SHA512

2b9b3421d00440098bca4a995440ec0f99e16b1a902c3a0065fba2dc9ccf658fa9748bc389d7fb52c05094cc206b93630bb5db27e3c06467dca011795e92d24c
SSDEEP

768:yGdaJQIyUBpyge2RxeDLCPlMW5WsOkAvSzL56rx64R6TR/IUt6a4szx:/IyUB7e2RoDLCdLWsOVqzLErxzEhITa

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  8e11f222a8330a46c9108c48d4a21062_JaffaCakes118
- Size
  
  48KB
- MD5
  
  8e11f222a8330a46c9108c48d4a21062
- SHA1
  
  eae359eac46fa216d42382a533a64f4a3b47e2f8
- SHA256
  
  0099ebb09a5ac4f83cd5cf36e9f070b8585c5ec7eff07d0fc97a419dad5282ca
- SHA512
  
  2b9b3421d00440098bca4a995440ec0f99e16b1a902c3a0065fba2dc9ccf658fa9748bc389d7fb52c05094cc206b93630bb5db27e3c06467dca011795e92d24c
- SSDEEP
  
  768:yGdaJQIyUBpyge2RxeDLCPlMW5WsOkAvSzL56rx64R6TR/IUt6a4szx:/IyUB7e2RoDLCdLWsOVqzLErxzEhITa
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation