020f42dab78ca034b4fa4c59a4e19626b144ce199e7a4eeb16eb35b0be6e92be | Triage

Sharing

General

Target

da6fd3466414d81d24a7b8d4de7f24fd_JaffaCakes118
Size

78KB
Sample

240911-qnkaeashmd
MD5

da6fd3466414d81d24a7b8d4de7f24fd
SHA1

8a338fe8388674e5191fd237748bcd63cd7a52f5
SHA256

020f42dab78ca034b4fa4c59a4e19626b144ce199e7a4eeb16eb35b0be6e92be
SHA512

6d347906be4bdff7de9eba90de2c5764d3181cae13d21572b6cb6605bc7d680e57077351e1a725dd48daadaeaeda64dd180952055cf27956ea91e19a695e497f
SSDEEP

1536:yiEWnF/GpKJBaAxrWFXL+zmUDB9BS0iuqon7mouJlIK:0WUpK5rWhQX6g7mouJlIK

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  da6fd3466414d81d24a7b8d4de7f24fd_JaffaCakes118
- Size
  
  78KB
- MD5
  
  da6fd3466414d81d24a7b8d4de7f24fd
- SHA1
  
  8a338fe8388674e5191fd237748bcd63cd7a52f5
- SHA256
  
  020f42dab78ca034b4fa4c59a4e19626b144ce199e7a4eeb16eb35b0be6e92be
- SHA512
  
  6d347906be4bdff7de9eba90de2c5764d3181cae13d21572b6cb6605bc7d680e57077351e1a725dd48daadaeaeda64dd180952055cf27956ea91e19a695e497f
- SSDEEP
  
  1536:yiEWnF/GpKJBaAxrWFXL+zmUDB9BS0iuqon7mouJlIK:0WUpK5rWhQX6g7mouJlIK
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation