a440fc15a28134a4ade15b28a4a671fa338b80b3b6815e52939172f1d1a3138f | Triage

Sharing

General

Target

02e388ca7aba4e3b916d10c35e4a98a2_JaffaCakes118
Size

64KB
Sample

240620-fb518szapb
MD5

02e388ca7aba4e3b916d10c35e4a98a2
SHA1

f8f8ce776b4ba0faf06777e6d3b598c57cbad7b9
SHA256

a440fc15a28134a4ade15b28a4a671fa338b80b3b6815e52939172f1d1a3138f
SHA512

3765d1885f57b58593bdce99ce824e87f809fe4f263ded8f99b7fb304939f71f5c9053d909c47d9eacc7dccd3bb627fc6e6ab67efb3cad25dec56730980bae61
SSDEEP

1536:SJfGWim9Bizc1mRBNKtLPcq22d1Fvk1VI:CeHXNK9Z1a1VI

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  02e388ca7aba4e3b916d10c35e4a98a2_JaffaCakes118
- Size
  
  64KB
- MD5
  
  02e388ca7aba4e3b916d10c35e4a98a2
- SHA1
  
  f8f8ce776b4ba0faf06777e6d3b598c57cbad7b9
- SHA256
  
  a440fc15a28134a4ade15b28a4a671fa338b80b3b6815e52939172f1d1a3138f
- SHA512
  
  3765d1885f57b58593bdce99ce824e87f809fe4f263ded8f99b7fb304939f71f5c9053d909c47d9eacc7dccd3bb627fc6e6ab67efb3cad25dec56730980bae61
- SSDEEP
  
  1536:SJfGWim9Bizc1mRBNKtLPcq22d1Fvk1VI:CeHXNK9Z1a1VI
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2