58adb85e89e5324f358ca5b4d5723b1e6cbaa3553c70d4ddaee218255a390a26 | Triage

Sharing

General

Target

5687440b930252cb4f7fdd8ffdb3dad0_JaffaCakes118
Size

550KB
Sample

241018-kt6gyaxhjd
MD5

5687440b930252cb4f7fdd8ffdb3dad0
SHA1

97e4eeedf50aa4b434cd30514a90391d6db4e3fe
SHA256

58adb85e89e5324f358ca5b4d5723b1e6cbaa3553c70d4ddaee218255a390a26
SHA512

1356085ed973e23853d79542f3d828b59e9aa0e441816dee9b53f240a117aa69918fec7ceeafc4e9bc502c6ef49b59089443bc2e551110501477c2e2884f379c
SSDEEP

12288:Iu3URWtsYf8PemjE8h0UxH9ND6fvhMrf1seW2/ag2ns:IkQe8PemjTh0Ul/8vh+qUAs

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  5687440b930252cb4f7fdd8ffdb3dad0_JaffaCakes118
- Size
  
  550KB
- MD5
  
  5687440b930252cb4f7fdd8ffdb3dad0
- SHA1
  
  97e4eeedf50aa4b434cd30514a90391d6db4e3fe
- SHA256
  
  58adb85e89e5324f358ca5b4d5723b1e6cbaa3553c70d4ddaee218255a390a26
- SHA512
  
  1356085ed973e23853d79542f3d828b59e9aa0e441816dee9b53f240a117aa69918fec7ceeafc4e9bc502c6ef49b59089443bc2e551110501477c2e2884f379c
- SSDEEP
  
  12288:Iu3URWtsYf8PemjE8h0UxH9ND6fvhMrf1seW2/ag2ns:IkQe8PemjTh0Ul/8vh+qUAs
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation