cb42fc8118ce35624de2779e9aa91f078a7c473b6d69c23cf41e1352c31da327 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1b1050019296f46ff1bb6786908471e_JaffaCakes118
Size

6.9MB
Sample

240915-ey1vcsvhkh
MD5

e1b1050019296f46ff1bb6786908471e
SHA1

2290f8c6ffd8df994b623d6610e2296722787bd2
SHA256

cb42fc8118ce35624de2779e9aa91f078a7c473b6d69c23cf41e1352c31da327
SHA512

3f233c5b020fd2e68e83fec71c81a13a131a7911b563c793a6efe7904ee6318c11723e4e3b2e55277499a4b994d3c1c641f28e16f91617b718fb6c2c302f8d0e
SSDEEP

49152:PbE1/4iYll93tUyWoPdXRN966/VjFzpzxngMq1khWOAxFKKUa3iY1u8xfjMCHD57:P+APBt/d1bQ1dIYEwD50nFfr1xlbru

Score

7^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  e1b1050019296f46ff1bb6786908471e_JaffaCakes118
- Size
  
  6.9MB
- MD5
  
  e1b1050019296f46ff1bb6786908471e
- SHA1
  
  2290f8c6ffd8df994b623d6610e2296722787bd2
- SHA256
  
  cb42fc8118ce35624de2779e9aa91f078a7c473b6d69c23cf41e1352c31da327
- SHA512
  
  3f233c5b020fd2e68e83fec71c81a13a131a7911b563c793a6efe7904ee6318c11723e4e3b2e55277499a4b994d3c1c641f28e16f91617b718fb6c2c302f8d0e
- SSDEEP
  
  49152:PbE1/4iYll93tUyWoPdXRN966/VjFzpzxngMq1khWOAxFKKUa3iY1u8xfjMCHD57:P+APBt/d1bQ1dIYEwD50nFfr1xlbru
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation