ca289a052409c03d2159a65b234f193f23aa22d7baa758794ff3dcd297a9ca55 | Triage

Sharing

General

Target

2afee025a9acb3e6259703be9fe21c4b_JaffaCakes118
Size

41KB
Sample

241009-fadwcsscqe
MD5

2afee025a9acb3e6259703be9fe21c4b
SHA1

f0738049c022f8ae5171ce70cdf7593c2eada371
SHA256

ca289a052409c03d2159a65b234f193f23aa22d7baa758794ff3dcd297a9ca55
SHA512

762c8e4c0e39c1823e451dad9b31b8a01291ca2236fb44629f3824d8b02efd53d74ff2102cfa0ca35ab9a9a4488487cc345d96fa2699071bdd8be216a1d7dfb8
SSDEEP

768:e6ATgysDJ1bO2W4GZIueuTx9lUcnln2ZfGbppqvw73h7qbSBzXns6LII/TgZf:O8J1q2z9ueExAcd2ZfGbppqI739q6s6u

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  2afee025a9acb3e6259703be9fe21c4b_JaffaCakes118
- Size
  
  41KB
- MD5
  
  2afee025a9acb3e6259703be9fe21c4b
- SHA1
  
  f0738049c022f8ae5171ce70cdf7593c2eada371
- SHA256
  
  ca289a052409c03d2159a65b234f193f23aa22d7baa758794ff3dcd297a9ca55
- SHA512
  
  762c8e4c0e39c1823e451dad9b31b8a01291ca2236fb44629f3824d8b02efd53d74ff2102cfa0ca35ab9a9a4488487cc345d96fa2699071bdd8be216a1d7dfb8
- SSDEEP
  
  768:e6ATgysDJ1bO2W4GZIueuTx9lUcnln2ZfGbppqvw73h7qbSBzXns6LII/TgZf:O8J1q2z9ueExAcd2ZfGbppqI739q6s6u
Score

8^/10

persistence privilege_escalation discovery
- Event Triggered Execution: AppCert DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.
  persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppCert DLLs

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppCert DLLs

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation