1b9cbc20d3ebd1b1e025763b757fd888748f51603f0aa363d3702c89ed8c7a3c | Triage

Sharing

General

Target

b0ce4854159aba63ac4fe49921f80e31_JaffaCakes118
Size

11KB
Sample

240820-zqnv2ssgrd
MD5

b0ce4854159aba63ac4fe49921f80e31
SHA1

64de3b36a8bdfcd9603ce0f23d0403488d792498
SHA256

1b9cbc20d3ebd1b1e025763b757fd888748f51603f0aa363d3702c89ed8c7a3c
SHA512

c508419f3f7e0420bffedff4866d8a8d13ca076bbbf35daa066e0b1bb0e3426797f4842c1449e4a0a359d41628695aae449ad3368e12a15d7ce7581ca9a5105f
SSDEEP

192:MNpO8g/6Wir+gkpHW/ONTxtWBPz5AxswCMrpY7e8LqPZo5LdCfq1Rn6O39:c48g/6Wir+JHW/OXt65Axsr6+e9PfqbP

Score

8^/10

aspackv2 discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  b0ce4854159aba63ac4fe49921f80e31_JaffaCakes118
- Size
  
  11KB
- MD5
  
  b0ce4854159aba63ac4fe49921f80e31
- SHA1
  
  64de3b36a8bdfcd9603ce0f23d0403488d792498
- SHA256
  
  1b9cbc20d3ebd1b1e025763b757fd888748f51603f0aa363d3702c89ed8c7a3c
- SHA512
  
  c508419f3f7e0420bffedff4866d8a8d13ca076bbbf35daa066e0b1bb0e3426797f4842c1449e4a0a359d41628695aae449ad3368e12a15d7ce7581ca9a5105f
- SSDEEP
  
  192:MNpO8g/6Wir+gkpHW/ONTxtWBPz5AxswCMrpY7e8LqPZo5LdCfq1Rn6O39:c48g/6Wir+JHW/OXt65Axsr6+e9PfqbP
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation