46c74cb0f935d2a800f41bd0827f44ca39fb04cfc9ad73d331a6586ba40db5a6 | Triage

Sharing

General

Target

a2695f174abda82def6d6333e488d965_JaffaCakes118
Size

100KB
Sample

240817-nyc8qsteme
MD5

a2695f174abda82def6d6333e488d965
SHA1

1edf536b480f8a731beffe031b2cd149f841dcea
SHA256

46c74cb0f935d2a800f41bd0827f44ca39fb04cfc9ad73d331a6586ba40db5a6
SHA512

2ae0df25ca00e98f83ce4c2d3fa3fbdcd12a10d28099fa6cee44e126d6ba31983251cbc86834b15fcc0298e158257647d1c785011756826cdbdc98732d04b141
SSDEEP

1536:ZFRtjCHXg5N+AdiT+ZKU5z5nHBEVagILHGrrvWhpQWojDhH1MyDXLHoXSSSeSSS1:ZLkWPd6+ZvzGI76ypet17rLHof

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a2695f174abda82def6d6333e488d965_JaffaCakes118
- Size
  
  100KB
- MD5
  
  a2695f174abda82def6d6333e488d965
- SHA1
  
  1edf536b480f8a731beffe031b2cd149f841dcea
- SHA256
  
  46c74cb0f935d2a800f41bd0827f44ca39fb04cfc9ad73d331a6586ba40db5a6
- SHA512
  
  2ae0df25ca00e98f83ce4c2d3fa3fbdcd12a10d28099fa6cee44e126d6ba31983251cbc86834b15fcc0298e158257647d1c785011756826cdbdc98732d04b141
- SSDEEP
  
  1536:ZFRtjCHXg5N+AdiT+ZKU5z5nHBEVagILHGrrvWhpQWojDhH1MyDXLHoXSSSeSSS1:ZLkWPd6+ZvzGI76ypet17rLHof
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation