21c20a34543249bafbf8b9b4539a64bf98071804246ac4f850438c9829a7eeed | Triage

Sharing

General

Target

8ed45ea1d6ba47488559a5a325e20a58_JaffaCakes118
Size

9KB
Sample

240812-qbcd2awele
MD5

8ed45ea1d6ba47488559a5a325e20a58
SHA1

8792bbd05427e59d045bb450aaf5276da9b61656
SHA256

21c20a34543249bafbf8b9b4539a64bf98071804246ac4f850438c9829a7eeed
SHA512

eaca2c9a467a7a6062712b6b8387f24ccb1b2e3473c724da9afe39ab8a6dda3c122e184b27f962f4927e86f9540d5bde309a6df1aeca53d327479655fc148834
SSDEEP

192:FUKhobJsQKQrYY81vSLivBjMC9PT7kiJhKUbNuRK3Xm//2KPnkgUwugu:WRKXWYJIevBj59PT4iJUauOXmnP4j

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  8ed45ea1d6ba47488559a5a325e20a58_JaffaCakes118
- Size
  
  9KB
- MD5
  
  8ed45ea1d6ba47488559a5a325e20a58
- SHA1
  
  8792bbd05427e59d045bb450aaf5276da9b61656
- SHA256
  
  21c20a34543249bafbf8b9b4539a64bf98071804246ac4f850438c9829a7eeed
- SHA512
  
  eaca2c9a467a7a6062712b6b8387f24ccb1b2e3473c724da9afe39ab8a6dda3c122e184b27f962f4927e86f9540d5bde309a6df1aeca53d327479655fc148834
- SSDEEP
  
  192:FUKhobJsQKQrYY81vSLivBjMC9PT7kiJhKUbNuRK3Xm//2KPnkgUwugu:WRKXWYJIevBj59PT4iJUauOXmnP4j
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation