58b4acf11d22f7cfb2872b36d63b60ff30da61ecf480453a9877b32b2eda92b2 | Triage

Sharing

General

Target

80eb6e576932743d0d6a0744065c5580_JaffaCakes118
Size

562KB
Sample

241031-a9wbsstqas
MD5

80eb6e576932743d0d6a0744065c5580
SHA1

1a72e610be1d7f72b671a8e2d67187af6aeab6bf
SHA256

58b4acf11d22f7cfb2872b36d63b60ff30da61ecf480453a9877b32b2eda92b2
SHA512

cc5509a15a35dd56bc1a1d44ea941d9c9a67c1b8431d21bc89d840b838b9c3cb938ae04ce5e9c7a7d074cf5ea27ef4cfed61e70d157b409379abcedf4f184a13
SSDEEP

12288:Iu3URWtsYf8PemjE8h0UxH9ND6fvhMrf1seW2/ag2n+G:IkQe8PemjTh0Ul/8vh+qUA+G

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  80eb6e576932743d0d6a0744065c5580_JaffaCakes118
- Size
  
  562KB
- MD5
  
  80eb6e576932743d0d6a0744065c5580
- SHA1
  
  1a72e610be1d7f72b671a8e2d67187af6aeab6bf
- SHA256
  
  58b4acf11d22f7cfb2872b36d63b60ff30da61ecf480453a9877b32b2eda92b2
- SHA512
  
  cc5509a15a35dd56bc1a1d44ea941d9c9a67c1b8431d21bc89d840b838b9c3cb938ae04ce5e9c7a7d074cf5ea27ef4cfed61e70d157b409379abcedf4f184a13
- SSDEEP
  
  12288:Iu3URWtsYf8PemjE8h0UxH9ND6fvhMrf1seW2/ag2n+G:IkQe8PemjTh0Ul/8vh+qUA+G
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation