36c780fb2d44716ec8e470f09cdbae9ea76fb7847e8880c6654ead1a16c1b4f8 | Triage

Sharing

General

Target

a0e816ae09c6ff5434a8000a3428fff5_JaffaCakes118
Size

768KB
Sample

240817-c6crdswdjj
MD5

a0e816ae09c6ff5434a8000a3428fff5
SHA1

97e59aeda209a2ece4ba6c7fd5fa1f28efbb0587
SHA256

36c780fb2d44716ec8e470f09cdbae9ea76fb7847e8880c6654ead1a16c1b4f8
SHA512

8c5a8252a7bb551540fd4338069155bf4217f311ec4db519d0d6ace0266467771e209e428d78d5dd7b7b35827d03d85538a20c3db90fb589cd614f30f27ea417
SSDEEP

12288:wi1x55UIEhlCXvkXVg8IBjLvl8NLrcgIHMlNCQQUivUqzxmmPCiRG:BGIEuvQERvWxrctHMlNCQQUi8ohw

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a0e816ae09c6ff5434a8000a3428fff5_JaffaCakes118
- Size
  
  768KB
- MD5
  
  a0e816ae09c6ff5434a8000a3428fff5
- SHA1
  
  97e59aeda209a2ece4ba6c7fd5fa1f28efbb0587
- SHA256
  
  36c780fb2d44716ec8e470f09cdbae9ea76fb7847e8880c6654ead1a16c1b4f8
- SHA512
  
  8c5a8252a7bb551540fd4338069155bf4217f311ec4db519d0d6ace0266467771e209e428d78d5dd7b7b35827d03d85538a20c3db90fb589cd614f30f27ea417
- SSDEEP
  
  12288:wi1x55UIEhlCXvkXVg8IBjLvl8NLrcgIHMlNCQQUivUqzxmmPCiRG:BGIEuvQERvWxrctHMlNCQQUi8ohw
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation