90989e93dfc4544f56ec6f3b8b398faf4f42932d18e122b27b5bf0ad50cec542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

081bc5584ad357e6b8a8dcfa81fd3dd7_JaffaCakes118
Size

168KB
Sample

240624-m18a8aycng
MD5

081bc5584ad357e6b8a8dcfa81fd3dd7
SHA1

379425eea502c0bdb38c8b2ddc6c377bc84cc956
SHA256

90989e93dfc4544f56ec6f3b8b398faf4f42932d18e122b27b5bf0ad50cec542
SHA512

0288f02347a0c42dbd0787817f0ecd484783a181b848f4ec7c545d72b5a112fbf7ec6f3cb79344996472584a99174f59a6beb3b54759180d48b5aac970ed35d2
SSDEEP

3072:/dUWdtZtsmP6L2FoCjpV8h11CZ4AJqIIY9LZqi9lGlGcrSZws:fP6L2FLoUZToc9N3lGlGca

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  081bc5584ad357e6b8a8dcfa81fd3dd7_JaffaCakes118
- Size
  
  168KB
- MD5
  
  081bc5584ad357e6b8a8dcfa81fd3dd7
- SHA1
  
  379425eea502c0bdb38c8b2ddc6c377bc84cc956
- SHA256
  
  90989e93dfc4544f56ec6f3b8b398faf4f42932d18e122b27b5bf0ad50cec542
- SHA512
  
  0288f02347a0c42dbd0787817f0ecd484783a181b848f4ec7c545d72b5a112fbf7ec6f3cb79344996472584a99174f59a6beb3b54759180d48b5aac970ed35d2
- SSDEEP
  
  3072:/dUWdtZtsmP6L2FoCjpV8h11CZ4AJqIIY9LZqi9lGlGcrSZws:fP6L2FLoUZToc9N3lGlGca
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2