fe7aa27724791c68616fc8c17aca7c9b14c84513be7e4d2a2013c0fe6b298ce8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3cc5574e486aa328103cf94b90f90a9_JaffaCakes118
Size

100KB
Sample

240817-x1flbasbpe
MD5

a3cc5574e486aa328103cf94b90f90a9
SHA1

e5988fb0858569be112d2a33fbfddb9f0abfdc66
SHA256

fe7aa27724791c68616fc8c17aca7c9b14c84513be7e4d2a2013c0fe6b298ce8
SHA512

d808ac5430d7a71c4f78804048fc85bc8564b57be26fbb5b563fd3cc80d525b574ca0fb38b021f738d01445967834eb1b60c786b3413c8086f6ef2283a4a43de
SSDEEP

1536:Qg1v7gU5Gl2Fb3oYvIuwe8BFkKM4ZlAA/uSIUuTHM0mno+cJlId:b1v79fEFkKBvZFuTSnohJlId

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a3cc5574e486aa328103cf94b90f90a9_JaffaCakes118
- Size
  
  100KB
- MD5
  
  a3cc5574e486aa328103cf94b90f90a9
- SHA1
  
  e5988fb0858569be112d2a33fbfddb9f0abfdc66
- SHA256
  
  fe7aa27724791c68616fc8c17aca7c9b14c84513be7e4d2a2013c0fe6b298ce8
- SHA512
  
  d808ac5430d7a71c4f78804048fc85bc8564b57be26fbb5b563fd3cc80d525b574ca0fb38b021f738d01445967834eb1b60c786b3413c8086f6ef2283a4a43de
- SSDEEP
  
  1536:Qg1v7gU5Gl2Fb3oYvIuwe8BFkKM4ZlAA/uSIUuTHM0mno+cJlId:b1v79fEFkKBvZFuTSnohJlId
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation