2064344148259b6a2842d72be2d8a1fa55f7445dde66577432fcba55aed1d129 | Triage

Sharing

General

Target

eab6de4b6ce2f49cf9692f286e46cfc3_JaffaCakes118
Size

8KB
Sample

240919-gpkswsthrj
MD5

eab6de4b6ce2f49cf9692f286e46cfc3
SHA1

172b5f014f23d78684efce20823a9c9b7429f2fb
SHA256

2064344148259b6a2842d72be2d8a1fa55f7445dde66577432fcba55aed1d129
SHA512

81221caaacffc1e5095c152a1f7d6a00c720596da876246694e7e466eef870cf9211b8789e72f193b46d2c800700527657034039f2db781e05d580230f8c980c
SSDEEP

192:kLTLy9S5Rwxz2LqZ+4+gG9/YcnvOEsynO6:scKqZb+gGZYcnj

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  eab6de4b6ce2f49cf9692f286e46cfc3_JaffaCakes118
- Size
  
  8KB
- MD5
  
  eab6de4b6ce2f49cf9692f286e46cfc3
- SHA1
  
  172b5f014f23d78684efce20823a9c9b7429f2fb
- SHA256
  
  2064344148259b6a2842d72be2d8a1fa55f7445dde66577432fcba55aed1d129
- SHA512
  
  81221caaacffc1e5095c152a1f7d6a00c720596da876246694e7e466eef870cf9211b8789e72f193b46d2c800700527657034039f2db781e05d580230f8c980c
- SSDEEP
  
  192:kLTLy9S5Rwxz2LqZ+4+gG9/YcnvOEsynO6:scKqZb+gGZYcnj
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation