General

  • Target
    jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.bin
  • Size 48KB
  • Sample260930-mrtfpsysav
  • SHA256 570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.bin
    • Size 48KB
    • SHA256 570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks