Overview

overview

8

Static

static

3

a3e3758aad...18.exe

windows7-x64

a3e3758aad...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3e3758aad3cd94bd933020e5698dfff_JaffaCakes118

  • Size

    88KB

  • Sample

    240817-yg58aswcqm

  • MD5

    a3e3758aad3cd94bd933020e5698dfff

  • SHA1

    9131ea9397fdf2808c1296a29d891afd1ea83953

  • SHA256

    73d3d3c6234442a092a4857e834ece61d18e6dac3085fdc2fbd2d4a0f3fec79f

  • SHA512

    2d00391484aabbe81056696579b459a98b3b2753495286fbc2169cf2e3590109a8320ca1aaa7c42ee1249332e50ca1990f826e15d546be1ed31ba06aaf709168

  • SSDEEP

    1536:9uzsVOZhD9sM4Y+Wy/Im7rdAs/qurEgDSqxz04EEEC7xZopSluTHT9KoTJlIU:9uzscWFWyAgpAs/qgEOjo4BEC7oEkrhN

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      a3e3758aad3cd94bd933020e5698dfff_JaffaCakes118

    • Size

      88KB

    • MD5

      a3e3758aad3cd94bd933020e5698dfff

    • SHA1

      9131ea9397fdf2808c1296a29d891afd1ea83953

    • SHA256

      73d3d3c6234442a092a4857e834ece61d18e6dac3085fdc2fbd2d4a0f3fec79f

    • SHA512

      2d00391484aabbe81056696579b459a98b3b2753495286fbc2169cf2e3590109a8320ca1aaa7c42ee1249332e50ca1990f826e15d546be1ed31ba06aaf709168

    • SSDEEP

      1536:9uzsVOZhD9sM4Y+Wy/Im7rdAs/qurEgDSqxz04EEEC7xZopSluTHT9KoTJlIU:9uzscWFWyAgpAs/qgEOjo4BEC7oEkrhN

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks