Overview

overview

8

Static

static

3

ef150dc249...18.exe

windows7-x64

ef150dc249...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef150dc249937ff8edc68087c1dd3b75_JaffaCakes118

  • Size

    88KB

  • Sample

    240921-faf1qavgrg

  • MD5

    ef150dc249937ff8edc68087c1dd3b75

  • SHA1

    83ad40cde1f0811d7dde4832b4a7d3cdd78f2c69

  • SHA256

    37e0138710b3d30dd1b61448b993770351c755559b1c31a86815079a4d9b2dca

  • SHA512

    2487b7a1ee55da09f3de6a91dfb46438050a38a9a4e46a0f99978d28d10cb9ca7e0c69a73a8d8a2e5a783bd25cccd9ecebf2fc5f39cf2a19e2eac46c23e31c2f

  • SSDEEP

    1536:AwGv+H/luh1AK6dd2aTr/z4XC6RlgLqZkJzMeiJADEEEC7xZopSluTHT9KoTJlIU:AwGv+H/+1ASXFRlJmDBEC7oEkrhKoTJF

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      ef150dc249937ff8edc68087c1dd3b75_JaffaCakes118

    • Size

      88KB

    • MD5

      ef150dc249937ff8edc68087c1dd3b75

    • SHA1

      83ad40cde1f0811d7dde4832b4a7d3cdd78f2c69

    • SHA256

      37e0138710b3d30dd1b61448b993770351c755559b1c31a86815079a4d9b2dca

    • SHA512

      2487b7a1ee55da09f3de6a91dfb46438050a38a9a4e46a0f99978d28d10cb9ca7e0c69a73a8d8a2e5a783bd25cccd9ecebf2fc5f39cf2a19e2eac46c23e31c2f

    • SSDEEP

      1536:AwGv+H/luh1AK6dd2aTr/z4XC6RlgLqZkJzMeiJADEEEC7xZopSluTHT9KoTJlIU:AwGv+H/+1ASXFRlJmDBEC7oEkrhKoTJF

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks