a8fddfbfec8ada6ebf8bbfc4b6c83afc082e2ac7ac1b96b7c902e04f77fb7fa0 | Triage

Sharing

General

Target

ea9fa9383b1e8ebbaafd13871d26de12_JaffaCakes118
Size

100KB
Sample

240919-fjwgrs1hqc
MD5

ea9fa9383b1e8ebbaafd13871d26de12
SHA1

351e6faf2d3960d884427781e738f61e5a2be29a
SHA256

a8fddfbfec8ada6ebf8bbfc4b6c83afc082e2ac7ac1b96b7c902e04f77fb7fa0
SHA512

757589a5f7bf9b246c9dd36f56e029360aa2b10dc530e15fec84d0992923deb2820130831a3be9e988f8b6a507ffb1dc745cd7a4c16a2017f56a3e056f9bb015
SSDEEP

1536:aj/bzoicL0c3bqMnA9k7qk5Iy7ygEJSXQLwVgYzFB7ood:iAicNbqzqqk6ygJ8gYzL7oo

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  ea9fa9383b1e8ebbaafd13871d26de12_JaffaCakes118
- Size
  
  100KB
- MD5
  
  ea9fa9383b1e8ebbaafd13871d26de12
- SHA1
  
  351e6faf2d3960d884427781e738f61e5a2be29a
- SHA256
  
  a8fddfbfec8ada6ebf8bbfc4b6c83afc082e2ac7ac1b96b7c902e04f77fb7fa0
- SHA512
  
  757589a5f7bf9b246c9dd36f56e029360aa2b10dc530e15fec84d0992923deb2820130831a3be9e988f8b6a507ffb1dc745cd7a4c16a2017f56a3e056f9bb015
- SSDEEP
  
  1536:aj/bzoicL0c3bqMnA9k7qk5Iy7ygEJSXQLwVgYzFB7ood:iAicNbqzqqk6ygJ8gYzL7oo
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation