9ad8c3439276bdcde1d0447a201a44435faa55e77e90e008d8230ad3ca6aa275 | Triage

Sharing

General

Target

a9dc23bf4b0cde4a8f32e9e57c8d1bd6_JaffaCakes118
Size

96KB
Sample

240819-gqn7psxgmd
MD5

a9dc23bf4b0cde4a8f32e9e57c8d1bd6
SHA1

7b851bf1c3280ab5d1086c806803dd9b2f5c2e9f
SHA256

9ad8c3439276bdcde1d0447a201a44435faa55e77e90e008d8230ad3ca6aa275
SHA512

658253d62dcda8ccc019a6514161c7f8f07b7a5a2ce3847a3813aa2ef56c348a1298cc8c1eb06c4216f33a509346c8a38553efd8f3060305da4f7ee0a0b1e6cc
SSDEEP

1536:IQk509d5BiYJhyhDFesmaPifUBEtyWV1y86L9xlQ4oMzPmRbbcsEkTvZoY9:Jk509NVehDyaafUBi/R6HloMzOBdEkvF

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a9dc23bf4b0cde4a8f32e9e57c8d1bd6_JaffaCakes118
- Size
  
  96KB
- MD5
  
  a9dc23bf4b0cde4a8f32e9e57c8d1bd6
- SHA1
  
  7b851bf1c3280ab5d1086c806803dd9b2f5c2e9f
- SHA256
  
  9ad8c3439276bdcde1d0447a201a44435faa55e77e90e008d8230ad3ca6aa275
- SHA512
  
  658253d62dcda8ccc019a6514161c7f8f07b7a5a2ce3847a3813aa2ef56c348a1298cc8c1eb06c4216f33a509346c8a38553efd8f3060305da4f7ee0a0b1e6cc
- SSDEEP
  
  1536:IQk509d5BiYJhyhDFesmaPifUBEtyWV1y86L9xlQ4oMzPmRbbcsEkTvZoY9:Jk509NVehDyaafUBi/R6HloMzOBdEkvF
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation