8790ad93e3329f10060957e199595e910a16047602b159331755c7302a95bd14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac2952604e83ade7ab7a4c571bb4977_JaffaCakes118
Size

96KB
Sample

240819-m7c4natfll
MD5

aac2952604e83ade7ab7a4c571bb4977
SHA1

8374c37fcb3026b7c7151915142eda7de408a2b1
SHA256

8790ad93e3329f10060957e199595e910a16047602b159331755c7302a95bd14
SHA512

2cd39722af71a171feda9460326e948267e43e2f4ad6d844d96bc956e01547e13deb15266b0fdb881055a45ce6b99d7f78b6d6dcea0989b7e9e6b1a2fe571927
SSDEEP

1536:K8b6QREPNTtFD8Q5BEGkb/kHJ9vLxIKizlUkZks+bMgCWgeKq9vVoAu:KOEPZ8VkHzFcGAuKUvVo/

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  aac2952604e83ade7ab7a4c571bb4977_JaffaCakes118
- Size
  
  96KB
- MD5
  
  aac2952604e83ade7ab7a4c571bb4977
- SHA1
  
  8374c37fcb3026b7c7151915142eda7de408a2b1
- SHA256
  
  8790ad93e3329f10060957e199595e910a16047602b159331755c7302a95bd14
- SHA512
  
  2cd39722af71a171feda9460326e948267e43e2f4ad6d844d96bc956e01547e13deb15266b0fdb881055a45ce6b99d7f78b6d6dcea0989b7e9e6b1a2fe571927
- SSDEEP
  
  1536:K8b6QREPNTtFD8Q5BEGkb/kHJ9vLxIKizlUkZks+bMgCWgeKq9vVoAu:KOEPZ8VkHzFcGAuKUvVo/
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation