27c5c70788728be57102613cda8af09969171a4d0fbe5eef81749ef3dc557ebb | Triage

Sharing

General

Target

bd5493a5247ece47078d029d7f5cb165_JaffaCakes118
Size

58KB
Sample

240823-1y2bsa1gqn
MD5

bd5493a5247ece47078d029d7f5cb165
SHA1

fbf141577bfd64e2408aaa0cc90a6447d6aa4ab9
SHA256

27c5c70788728be57102613cda8af09969171a4d0fbe5eef81749ef3dc557ebb
SHA512

c46ac4aa31c46032a95be351c8b5238e4b5f93d50559ed80fff190f0180c6ef73fc930c8f82c37facad73e80ad91725c1321663129e8db10e85b6dd01db3628b
SSDEEP

1536:H+/EkhRwFw5QrNZC0DPmrAbG2TLMk7O/JoZ/tkzGbjk6d2:gtDJQBKMLMOQoZlkSB

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  bd5493a5247ece47078d029d7f5cb165_JaffaCakes118
- Size
  
  58KB
- MD5
  
  bd5493a5247ece47078d029d7f5cb165
- SHA1
  
  fbf141577bfd64e2408aaa0cc90a6447d6aa4ab9
- SHA256
  
  27c5c70788728be57102613cda8af09969171a4d0fbe5eef81749ef3dc557ebb
- SHA512
  
  c46ac4aa31c46032a95be351c8b5238e4b5f93d50559ed80fff190f0180c6ef73fc930c8f82c37facad73e80ad91725c1321663129e8db10e85b6dd01db3628b
- SSDEEP
  
  1536:H+/EkhRwFw5QrNZC0DPmrAbG2TLMk7O/JoZ/tkzGbjk6d2:gtDJQBKMLMOQoZlkSB
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

AppInit DLLs

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

AppInit DLLs

Netsh Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation