04fa1f748d79f1a741a7a13aa7a56d1eae4c6eed1357bcd072d4f78cf05dc0b5 | Triage

Sharing

General

Target

012a63d99e1b36a2f8fe0a3e47c0bc70_JaffaCakes118
Size

331KB
Sample

240930-nz1qesxhke
MD5

012a63d99e1b36a2f8fe0a3e47c0bc70
SHA1

49e0035cc0450c0e2559f50be047800fec71c870
SHA256

04fa1f748d79f1a741a7a13aa7a56d1eae4c6eed1357bcd072d4f78cf05dc0b5
SHA512

e4f0abab673e8585b80084d02de550b2abf7df0518696ffd284111834759b51605fbaee244cd5b4458c09c47bf4471539c26ab1a21ad6410c98561c89965d801
SSDEEP

6144:gtlyU+eCLtUT2HdPe/5xag5BaNvSGh1L7o1SbGqJHPN/:qP0e2cBxa6aNaGT7o1S3PN/

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  012a63d99e1b36a2f8fe0a3e47c0bc70_JaffaCakes118
- Size
  
  331KB
- MD5
  
  012a63d99e1b36a2f8fe0a3e47c0bc70
- SHA1
  
  49e0035cc0450c0e2559f50be047800fec71c870
- SHA256
  
  04fa1f748d79f1a741a7a13aa7a56d1eae4c6eed1357bcd072d4f78cf05dc0b5
- SHA512
  
  e4f0abab673e8585b80084d02de550b2abf7df0518696ffd284111834759b51605fbaee244cd5b4458c09c47bf4471539c26ab1a21ad6410c98561c89965d801
- SSDEEP
  
  6144:gtlyU+eCLtUT2HdPe/5xag5BaNvSGh1L7o1SbGqJHPN/:qP0e2cBxa6aNaGT7o1S3PN/
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation