Overview

overview

8

Static

static

3

ce606ed14d...18.exe

windows7-x64

ce606ed14d...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce606ed14dedec784f708874876f1b2f_JaffaCakes118

  • Size

    100KB

  • Sample

    240906-b96m7szclq

  • MD5

    ce606ed14dedec784f708874876f1b2f

  • SHA1

    d018d6314120c090070cbfb93f9c5cfa045475bf

  • SHA256

    06c36149738ed6ba8fbf477bb4fdbc00e58f820a61967c0b43721019a78bcb9e

  • SHA512

    a0b5959088306bb38418d5d9d94a9d9367319f67ad85c9e071871b035e127f30bedf8ee6020edc42c3532e6ffe86ab34b664c0e568f85a06aaacef5b89a1fc3a

  • SSDEEP

    1536:8/MKp3raEi8MtTs7FV06F3Fh+yUe9OQIXx1OojDhH1MyDXLHoXSSSeSSS+y:qMUraN8MtTMBF1h+yFONXx1t17rLHof

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      ce606ed14dedec784f708874876f1b2f_JaffaCakes118

    • Size

      100KB

    • MD5

      ce606ed14dedec784f708874876f1b2f

    • SHA1

      d018d6314120c090070cbfb93f9c5cfa045475bf

    • SHA256

      06c36149738ed6ba8fbf477bb4fdbc00e58f820a61967c0b43721019a78bcb9e

    • SHA512

      a0b5959088306bb38418d5d9d94a9d9367319f67ad85c9e071871b035e127f30bedf8ee6020edc42c3532e6ffe86ab34b664c0e568f85a06aaacef5b89a1fc3a

    • SSDEEP

      1536:8/MKp3raEi8MtTs7FV06F3Fh+yUe9OQIXx1OojDhH1MyDXLHoXSSSeSSS+y:qMUraN8MtTMBF1h+yFONXx1t17rLHof

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks