e5e39b5781ec875d2ad4970ce6f8a48dff4564c571c532e89e7d14d535225f02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fadea7083cfd35014bca5d5430e21e_JaffaCakes118
Size

92KB
Sample

240826-bh7q7axhmn
MD5

c1fadea7083cfd35014bca5d5430e21e
SHA1

aaa4ddfd64ddfcaa2797f2a971ce530661e297f3
SHA256

e5e39b5781ec875d2ad4970ce6f8a48dff4564c571c532e89e7d14d535225f02
SHA512

0b8ee899f1bbdcbf03e6c010652e7e6210e628477df7b74211b9f90503df7e913392578f888137b0e71f1ae3c52e0107f1d77ef7a3fa227cbd400b590ccd75fd
SSDEEP

1536:Q86i5blJcyoPW6dqugSBd005KBdCnY1UAMGAEhEacLfHwzGo:19bgyo1qpST0ZBqZcyacszGo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  c1fadea7083cfd35014bca5d5430e21e_JaffaCakes118
- Size
  
  92KB
- MD5
  
  c1fadea7083cfd35014bca5d5430e21e
- SHA1
  
  aaa4ddfd64ddfcaa2797f2a971ce530661e297f3
- SHA256
  
  e5e39b5781ec875d2ad4970ce6f8a48dff4564c571c532e89e7d14d535225f02
- SHA512
  
  0b8ee899f1bbdcbf03e6c010652e7e6210e628477df7b74211b9f90503df7e913392578f888137b0e71f1ae3c52e0107f1d77ef7a3fa227cbd400b590ccd75fd
- SSDEEP
  
  1536:Q86i5blJcyoPW6dqugSBd005KBdCnY1UAMGAEhEacLfHwzGo:19bgyo1qpST0ZBqZcyacszGo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation