b007bcfc8c579c23f1165bd8af60e3fe702aa762cdb7994950bcc30f97d2fff3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16a40d228feca92dcb0af329d5b77da_JaffaCakes118
Size

116KB
Sample

240907-jjlt4ssfml
MD5

d16a40d228feca92dcb0af329d5b77da
SHA1

c561da2b10419a03a9170be6137fc2d974fcab33
SHA256

b007bcfc8c579c23f1165bd8af60e3fe702aa762cdb7994950bcc30f97d2fff3
SHA512

c10ff2cdec4b527e27ea808c652b0d534f873ee531ae617673f6a4d061275cb026132f2a3635125f4d82524d94e9f1111fe1cbf63530a021d1e339abbcf92048
SSDEEP

3072:pHlQqGHDhhB0gQ+kcGWZbk2Fye/Do5xqDrtg:pHltGHDhjpQ+/GWZQ2ZGxqP

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  d16a40d228feca92dcb0af329d5b77da_JaffaCakes118
- Size
  
  116KB
- MD5
  
  d16a40d228feca92dcb0af329d5b77da
- SHA1
  
  c561da2b10419a03a9170be6137fc2d974fcab33
- SHA256
  
  b007bcfc8c579c23f1165bd8af60e3fe702aa762cdb7994950bcc30f97d2fff3
- SHA512
  
  c10ff2cdec4b527e27ea808c652b0d534f873ee531ae617673f6a4d061275cb026132f2a3635125f4d82524d94e9f1111fe1cbf63530a021d1e339abbcf92048
- SSDEEP
  
  3072:pHlQqGHDhhB0gQ+kcGWZbk2Fye/Do5xqDrtg:pHltGHDhjpQ+/GWZQ2ZGxqP
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation