e22400446c9ffac351b43ac15e54c144f82fed1b942808cd8c8cf87d55b9bf1c | Triage

Sharing

General

Target

14c1eb5d306bb7b72e324cfe4383ed53_JaffaCakes118
Size

112KB
Sample

240627-flw63swcrq
MD5

14c1eb5d306bb7b72e324cfe4383ed53
SHA1

7640e069c7f14e328a535a7ab0ad3146706c4875
SHA256

e22400446c9ffac351b43ac15e54c144f82fed1b942808cd8c8cf87d55b9bf1c
SHA512

4255f3b8e66a21a6e82a45bb9a01fe17daaf5701b89c1684b4183190801c5a575c0e2ff8dd5d9601c34aea2491d101cd10400211682b37eb2881eddeb14a1a16
SSDEEP

3072:0oEistDI1uVdCb0AzcSFxnK7UOZm7ksTu0NC:0/zDSO8fTFx2HmgsT4

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  14c1eb5d306bb7b72e324cfe4383ed53_JaffaCakes118
- Size
  
  112KB
- MD5
  
  14c1eb5d306bb7b72e324cfe4383ed53
- SHA1
  
  7640e069c7f14e328a535a7ab0ad3146706c4875
- SHA256
  
  e22400446c9ffac351b43ac15e54c144f82fed1b942808cd8c8cf87d55b9bf1c
- SHA512
  
  4255f3b8e66a21a6e82a45bb9a01fe17daaf5701b89c1684b4183190801c5a575c0e2ff8dd5d9601c34aea2491d101cd10400211682b37eb2881eddeb14a1a16
- SSDEEP
  
  3072:0oEistDI1uVdCb0AzcSFxnK7UOZm7ksTu0NC:0/zDSO8fTFx2HmgsT4
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2