7cfe04aeb538af8f9a88b02950cab2d7e62fe68a1164eefb9ef82532914f8e61 | Triage

Sharing

General

Target

c933179533300b7dc015f35263c30c79_JaffaCakes118
Size

7KB
Sample

240829-t3f33s1cld
MD5

c933179533300b7dc015f35263c30c79
SHA1

bc40efee70d9aea25a84f05e42aa07f335f3e270
SHA256

7cfe04aeb538af8f9a88b02950cab2d7e62fe68a1164eefb9ef82532914f8e61
SHA512

4a60a61069aa69ad578639570c4614a20e1593c8826420796dd87e32952eac420d8ae39806041041403d7300adb6c897db95d52f38d08580f596f176637b7d9f
SSDEEP

96:woCvOtsKViJTj+RpG5RwxzOfIhQXl4+gG9/KSAPsv1Kfko2BgH:8lP+RU5RwxzOAhQ14+gG9/PJgH

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  c933179533300b7dc015f35263c30c79_JaffaCakes118
- Size
  
  7KB
- MD5
  
  c933179533300b7dc015f35263c30c79
- SHA1
  
  bc40efee70d9aea25a84f05e42aa07f335f3e270
- SHA256
  
  7cfe04aeb538af8f9a88b02950cab2d7e62fe68a1164eefb9ef82532914f8e61
- SHA512
  
  4a60a61069aa69ad578639570c4614a20e1593c8826420796dd87e32952eac420d8ae39806041041403d7300adb6c897db95d52f38d08580f596f176637b7d9f
- SSDEEP
  
  96:woCvOtsKViJTj+RpG5RwxzOfIhQXl4+gG9/KSAPsv1Kfko2BgH:8lP+RU5RwxzOAhQ14+gG9/PJgH
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation