Overview

overview

8

Static

static

3

a7395d8837...18.exe

windows7-x64

8

a7395d8837...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7395d8837782d19f89fe8e987ee9764_JaffaCakes118

  • Size

    61KB

  • Sample

    240818-s3dghstdjr

  • MD5

    a7395d8837782d19f89fe8e987ee9764

  • SHA1

    da218b7538affebfe2faecf37cbc93de66b84769

  • SHA256

    98b1e5b62f9c08472a44527b0bd4b2b4be989caedd6ec69064596e43a828522d

  • SHA512

    16f49017defaad93bd1a5cfc3774e3e10bedfc8edc44772e8e5bebeb87f1f1938c96788808ce9648d89fcf502349f0d6bbb4c6bd186fe105336d362c53f94574

  • SSDEEP

    1536:jNJyj2hF5rlplqa90dkE0CNVNBrvXWBr:j/3bxlqa90dkEJ7Sr

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      a7395d8837782d19f89fe8e987ee9764_JaffaCakes118

    • Size

      61KB

    • MD5

      a7395d8837782d19f89fe8e987ee9764

    • SHA1

      da218b7538affebfe2faecf37cbc93de66b84769

    • SHA256

      98b1e5b62f9c08472a44527b0bd4b2b4be989caedd6ec69064596e43a828522d

    • SHA512

      16f49017defaad93bd1a5cfc3774e3e10bedfc8edc44772e8e5bebeb87f1f1938c96788808ce9648d89fcf502349f0d6bbb4c6bd186fe105336d362c53f94574

    • SSDEEP

      1536:jNJyj2hF5rlplqa90dkE0CNVNBrvXWBr:j/3bxlqa90dkEJ7Sr

    Score
    8/10
    persistenceprivilege_escalationdiscovery

    • Event Triggered Execution: AppCert DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.

      persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks