8895e329cac14bb0bc1f9c256b8d7cc686ddb7599d97b3d522746102148507f7 | Triage

Sharing

General

Target

ea98144e04d8e4fd071b93d4ee3734a1_JaffaCakes118
Size

100KB
Sample

240919-e7fwjs1dqc
MD5

ea98144e04d8e4fd071b93d4ee3734a1
SHA1

b28feb066c8554dc7b616fde85d999c538f95b0f
SHA256

8895e329cac14bb0bc1f9c256b8d7cc686ddb7599d97b3d522746102148507f7
SHA512

5c643ae53492b3f09a2addadaba5bf30bb11360a9e5390ca3c4b11777c909b75645fe9d2c0ac574271024788cf009f38f5bc1520e579749370ef64a2f7d97adb
SSDEEP

1536:G2ynfrpVbylEeQHRG/CqsHKDTW72iGjRP3iZOcwojDhH1MyDXLHoXSSSeSSS+y:GRnzP8EeQxG0ETS2iwRP3oJt17rLHof

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  ea98144e04d8e4fd071b93d4ee3734a1_JaffaCakes118
- Size
  
  100KB
- MD5
  
  ea98144e04d8e4fd071b93d4ee3734a1
- SHA1
  
  b28feb066c8554dc7b616fde85d999c538f95b0f
- SHA256
  
  8895e329cac14bb0bc1f9c256b8d7cc686ddb7599d97b3d522746102148507f7
- SHA512
  
  5c643ae53492b3f09a2addadaba5bf30bb11360a9e5390ca3c4b11777c909b75645fe9d2c0ac574271024788cf009f38f5bc1520e579749370ef64a2f7d97adb
- SSDEEP
  
  1536:G2ynfrpVbylEeQHRG/CqsHKDTW72iGjRP3iZOcwojDhH1MyDXLHoXSSSeSSS+y:GRnzP8EeQxG0ETS2iwRP3oJt17rLHof
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation