25a0d2a46749fdb9aa8abd0eaeaddbdc5f8fd2a8f28e4ab8f81aff431158f8c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae8943443bd66bfe76eddbabe20002d_JaffaCakes118
Size

77KB
Sample

241002-qvdq7sydjk
MD5

0ae8943443bd66bfe76eddbabe20002d
SHA1

d25fdfa95ca32925af8c9f878e504c6924687ca1
SHA256

25a0d2a46749fdb9aa8abd0eaeaddbdc5f8fd2a8f28e4ab8f81aff431158f8c9
SHA512

d86aaa18019af79534dfe1d761b2ae9e7a95e6a6bd6a491af008bc925d6e3f3796377bdb0900fb4e8e21b24c4bf9073ce77afeb6b8e7a9353c04abb60e99fd4c
SSDEEP

1536:5p1UiJXXCdzVMFoxOj9FyWbGAAKCRlP4AfYUkjGgXkBGDoz:5j5CdBJs2WbxAJR4AyjtkwDoz

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  0ae8943443bd66bfe76eddbabe20002d_JaffaCakes118
- Size
  
  77KB
- MD5
  
  0ae8943443bd66bfe76eddbabe20002d
- SHA1
  
  d25fdfa95ca32925af8c9f878e504c6924687ca1
- SHA256
  
  25a0d2a46749fdb9aa8abd0eaeaddbdc5f8fd2a8f28e4ab8f81aff431158f8c9
- SHA512
  
  d86aaa18019af79534dfe1d761b2ae9e7a95e6a6bd6a491af008bc925d6e3f3796377bdb0900fb4e8e21b24c4bf9073ce77afeb6b8e7a9353c04abb60e99fd4c
- SSDEEP
  
  1536:5p1UiJXXCdzVMFoxOj9FyWbGAAKCRlP4AfYUkjGgXkBGDoz:5j5CdBJs2WbxAJR4AyjtkwDoz
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation