d30b7502e0025ead7d6c9ea85a3ac2bcc86b711913bf1850c659ff173ce32b43 | Triage

Sharing

General

Target

c00e0a28006e566d98d648895501c5b7_JaffaCakes118
Size

92KB
Sample

240825-f9b6taxcnh
MD5

c00e0a28006e566d98d648895501c5b7
SHA1

ac5c89577cf69fe74d92bc5c7559d95cd4144744
SHA256

d30b7502e0025ead7d6c9ea85a3ac2bcc86b711913bf1850c659ff173ce32b43
SHA512

5401010e08d1a7a64d9e1dab292db46dde827693bd4d77cfdeee549e81f526095490042d67e28a394bbf7e43636c0a444c089a87d664053e81ab575c5240462f
SSDEEP

1536:c6PwBuNW/l6IhqoHLHoULJITp+utrajn56jZL+TVmroxMWNLzMo:c6EhrNGYutGqy9xxlzMo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  c00e0a28006e566d98d648895501c5b7_JaffaCakes118
- Size
  
  92KB
- MD5
  
  c00e0a28006e566d98d648895501c5b7
- SHA1
  
  ac5c89577cf69fe74d92bc5c7559d95cd4144744
- SHA256
  
  d30b7502e0025ead7d6c9ea85a3ac2bcc86b711913bf1850c659ff173ce32b43
- SHA512
  
  5401010e08d1a7a64d9e1dab292db46dde827693bd4d77cfdeee549e81f526095490042d67e28a394bbf7e43636c0a444c089a87d664053e81ab575c5240462f
- SSDEEP
  
  1536:c6PwBuNW/l6IhqoHLHoULJITp+utrajn56jZL+TVmroxMWNLzMo:c6EhrNGYutGqy9xxlzMo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation