2eb3b50bc3a5809317b06a4ff928b64bdaf0938829010c52116c57a4f8251c71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de87969e6522087da6f65f814c49c6f6_JaffaCakes118
Size

88KB
Sample

240913-vjxgdsxhpk
MD5

de87969e6522087da6f65f814c49c6f6
SHA1

a0242191eae8b42aced3ed567ed28511e49048bf
SHA256

2eb3b50bc3a5809317b06a4ff928b64bdaf0938829010c52116c57a4f8251c71
SHA512

c269b9a468c49923f2dc195af9c30e0ba4462e48c48619ddc1d71b8fc2f6b2b20e4dd6faeb9263a4e5414c89ba3ed4126e9159fb07aae8d1e4a207c2e69cb1af
SSDEEP

1536:7+5xDU3md/uPgZKCQ9cPaP5xNAA8RJMrAX6u48tuQZ2IMlKxCqQ5do:KDU3md2aynreyOTcqMlKxGdo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  de87969e6522087da6f65f814c49c6f6_JaffaCakes118
- Size
  
  88KB
- MD5
  
  de87969e6522087da6f65f814c49c6f6
- SHA1
  
  a0242191eae8b42aced3ed567ed28511e49048bf
- SHA256
  
  2eb3b50bc3a5809317b06a4ff928b64bdaf0938829010c52116c57a4f8251c71
- SHA512
  
  c269b9a468c49923f2dc195af9c30e0ba4462e48c48619ddc1d71b8fc2f6b2b20e4dd6faeb9263a4e5414c89ba3ed4126e9159fb07aae8d1e4a207c2e69cb1af
- SSDEEP
  
  1536:7+5xDU3md/uPgZKCQ9cPaP5xNAA8RJMrAX6u48tuQZ2IMlKxCqQ5do:KDU3md2aynreyOTcqMlKxGdo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation