a01a79fc0d94bfcb25a1b3d966228144c3e714955ec1319d84b520db53c5b57a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07ed4684c0876e9525a475196424aef4_JaffaCakes118
Size

73KB
Sample

240624-mcd3gaxcje
MD5

07ed4684c0876e9525a475196424aef4
SHA1

7bc89fc81715d0d1fcd806e6b1c6e12b39c3dfab
SHA256

a01a79fc0d94bfcb25a1b3d966228144c3e714955ec1319d84b520db53c5b57a
SHA512

cc555aff08e0ebb894163976078a0e2884d55681119eeb430df6f1469d445adb389a51dca1f9f2f236b74380bca469493eb857e72c89066d4060bd27bec1f926
SSDEEP

1536:V2mQNulvqUpSLX7pBORzE16yx3dqjlpHHdDgirNju/oVcSH:VRvqUwaI6yxgP9vNu/oVcSH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  07ed4684c0876e9525a475196424aef4_JaffaCakes118
- Size
  
  73KB
- MD5
  
  07ed4684c0876e9525a475196424aef4
- SHA1
  
  7bc89fc81715d0d1fcd806e6b1c6e12b39c3dfab
- SHA256
  
  a01a79fc0d94bfcb25a1b3d966228144c3e714955ec1319d84b520db53c5b57a
- SHA512
  
  cc555aff08e0ebb894163976078a0e2884d55681119eeb430df6f1469d445adb389a51dca1f9f2f236b74380bca469493eb857e72c89066d4060bd27bec1f926
- SSDEEP
  
  1536:V2mQNulvqUpSLX7pBORzE16yx3dqjlpHHdDgirNju/oVcSH:VRvqUwaI6yxgP9vNu/oVcSH
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2