177ee21ebfea0009a34f2c6ec10f12b78ec4da40b52724bfb30902233b388b82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

183a645b83232d94e9a989a25c8df670_JaffaCakes118
Size

778KB
Sample

241006-qe2s4azdnd
MD5

183a645b83232d94e9a989a25c8df670
SHA1

456b778b00ef5be0458178904fca126bacb05961
SHA256

177ee21ebfea0009a34f2c6ec10f12b78ec4da40b52724bfb30902233b388b82
SHA512

12e41f6466641b800f3dcfcf44ed0c8eac5a4e198a869c5932e474dcef37f796e3f8efa22b91effdfb0fa08a339c61439792a78af1b16c088e815b59d7ffdb74
SSDEEP

12288:CDJM/bXntAh+nhZoqQEHvVIzJPz//DdvdYkNQX1NYtFX0jPDl5pudl1lnNRybMY2:Cd6atqLHNk5TdvKX1NYtFXOMNwc

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  183a645b83232d94e9a989a25c8df670_JaffaCakes118
- Size
  
  778KB
- MD5
  
  183a645b83232d94e9a989a25c8df670
- SHA1
  
  456b778b00ef5be0458178904fca126bacb05961
- SHA256
  
  177ee21ebfea0009a34f2c6ec10f12b78ec4da40b52724bfb30902233b388b82
- SHA512
  
  12e41f6466641b800f3dcfcf44ed0c8eac5a4e198a869c5932e474dcef37f796e3f8efa22b91effdfb0fa08a339c61439792a78af1b16c088e815b59d7ffdb74
- SSDEEP
  
  12288:CDJM/bXntAh+nhZoqQEHvVIzJPz//DdvdYkNQX1NYtFX0jPDl5pudl1lnNRybMY2:Cd6atqLHNk5TdvKX1NYtFXOMNwc
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation