2dba06936f5ba3e13eeb251b193b9155313c8ba21504caf66e1259d8c22eb7da | Triage

Sharing

General

Target

1863137cf55bc407e3a063c7185ff84f_JaffaCakes118
Size

239KB
Sample

240628-ce9l2sxhjk
MD5

1863137cf55bc407e3a063c7185ff84f
SHA1

eed067919d3db835c2995e46ae4597bbbdcb4be1
SHA256

2dba06936f5ba3e13eeb251b193b9155313c8ba21504caf66e1259d8c22eb7da
SHA512

9129acb9994d9899c19a1bdcc021af407f171bb1c509b02b6dc139463ba9f06873cdac0066e5d3f91ad686cb0e4ad7ea0619b09638dc34d549d93fbd3458d696
SSDEEP

6144:Z8zgNLrtxHDRTq/iMmHkOw3fs4YFkhJbvGlwXI42/I/3u:ZnNLrtxHDRTqKtEOwPsGhxtIRI/

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1863137cf55bc407e3a063c7185ff84f_JaffaCakes118
- Size
  
  239KB
- MD5
  
  1863137cf55bc407e3a063c7185ff84f
- SHA1
  
  eed067919d3db835c2995e46ae4597bbbdcb4be1
- SHA256
  
  2dba06936f5ba3e13eeb251b193b9155313c8ba21504caf66e1259d8c22eb7da
- SHA512
  
  9129acb9994d9899c19a1bdcc021af407f171bb1c509b02b6dc139463ba9f06873cdac0066e5d3f91ad686cb0e4ad7ea0619b09638dc34d549d93fbd3458d696
- SSDEEP
  
  6144:Z8zgNLrtxHDRTq/iMmHkOw3fs4YFkhJbvGlwXI42/I/3u:ZnNLrtxHDRTqKtEOwPsGhxtIRI/
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2