aed6a54c286d2e69228f1f61b82215074873575b5c4833f24c6afc8d528d1e29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055ffe00fd5731b9c98cff978aa86d24_JaffaCakes118
Size

148KB
Sample

241001-l3gevatdlp
MD5

055ffe00fd5731b9c98cff978aa86d24
SHA1

17b2b929b616fa137dce112859550248c638c7a5
SHA256

aed6a54c286d2e69228f1f61b82215074873575b5c4833f24c6afc8d528d1e29
SHA512

424a4c599e26d6f71ff703bcd783fede12371671687a6ac058463d7d08c4f7e967736ba25ecf183171ec671f7514e5e96aad346ad1ba53ec0c5f600d05559f45
SSDEEP

3072:fR1+aJe1mgawzxsBub861jIHxowoY2ozlAulu3GJ/hnduqhqgvJDssd+rSoV2H:fRUTV5n6LzZwWJyeqgvd+7O

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  055ffe00fd5731b9c98cff978aa86d24_JaffaCakes118
- Size
  
  148KB
- MD5
  
  055ffe00fd5731b9c98cff978aa86d24
- SHA1
  
  17b2b929b616fa137dce112859550248c638c7a5
- SHA256
  
  aed6a54c286d2e69228f1f61b82215074873575b5c4833f24c6afc8d528d1e29
- SHA512
  
  424a4c599e26d6f71ff703bcd783fede12371671687a6ac058463d7d08c4f7e967736ba25ecf183171ec671f7514e5e96aad346ad1ba53ec0c5f600d05559f45
- SSDEEP
  
  3072:fR1+aJe1mgawzxsBub861jIHxowoY2ozlAulu3GJ/hnduqhqgvJDssd+rSoV2H:fRUTV5n6LzZwWJyeqgvd+7O
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

AppInit DLLs

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation