46f8a385b86d08142dd37733e97282265bb83d1d471b33b387409f8cc6d4e522 | Triage

Sharing

General

Target

30c48c6b706722b587dad75f2eb20405_JaffaCakes118
Size

278KB
Sample

241010-tnhncsvalb
MD5

30c48c6b706722b587dad75f2eb20405
SHA1

d5075a8a871b133e830fdcccb1075924d83646ba
SHA256

46f8a385b86d08142dd37733e97282265bb83d1d471b33b387409f8cc6d4e522
SHA512

bba57b5408702ab462b7c817c85a48fe023ded5d5e335a3c2cdfe8f6437209cca0f5d14c93932d4f75ce4709f7321de76debb5d476fd8cd02180c525f06c0ce8
SSDEEP

6144:IiV3M7tydyE7ztsY4yTr8bjeJwj2EItHp4Pl6yzh0H0xn:Iu3URWtsYf8PemjE8h0Uxn

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  30c48c6b706722b587dad75f2eb20405_JaffaCakes118
- Size
  
  278KB
- MD5
  
  30c48c6b706722b587dad75f2eb20405
- SHA1
  
  d5075a8a871b133e830fdcccb1075924d83646ba
- SHA256
  
  46f8a385b86d08142dd37733e97282265bb83d1d471b33b387409f8cc6d4e522
- SHA512
  
  bba57b5408702ab462b7c817c85a48fe023ded5d5e335a3c2cdfe8f6437209cca0f5d14c93932d4f75ce4709f7321de76debb5d476fd8cd02180c525f06c0ce8
- SSDEEP
  
  6144:IiV3M7tydyE7ztsY4yTr8bjeJwj2EItHp4Pl6yzh0H0xn:Iu3URWtsYf8PemjE8h0Uxn
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation