Overview

overview

8

Static

static

3

290fd951e7...18.exe

windows7-x64

8

290fd951e7...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    290fd951e75814acb29584cceb003d4a_JaffaCakes118

  • Size

    559KB

  • Sample

    240706-wds3fszdlg

  • MD5

    290fd951e75814acb29584cceb003d4a

  • SHA1

    b5df08aab942349b6533e05b23c14b5ae67f5887

  • SHA256

    d319d47e694dee3a8e777a9a13bdfc86a23624026d49cbebdc72ec34107a5d8e

  • SHA512

    f860b7a0be3d254bd6ce3372ba5cb42dcaeee4faa7fa1cd64207e8eed826dc7d7f6f411b883906b39729aaea72216689a6b59bc9c0e80a9a4b14f4935d1ffdf0

  • SSDEEP

    12288:f3iN2HGu81J1rn6hflA+2FjpwCK2gTGbQ:fyVu8nNgL2FlwCRgTG

Score
8/10
persistence

Malware Config

Targets

    • Target

      290fd951e75814acb29584cceb003d4a_JaffaCakes118

    • Size

      559KB

    • MD5

      290fd951e75814acb29584cceb003d4a

    • SHA1

      b5df08aab942349b6533e05b23c14b5ae67f5887

    • SHA256

      d319d47e694dee3a8e777a9a13bdfc86a23624026d49cbebdc72ec34107a5d8e

    • SHA512

      f860b7a0be3d254bd6ce3372ba5cb42dcaeee4faa7fa1cd64207e8eed826dc7d7f6f411b883906b39729aaea72216689a6b59bc9c0e80a9a4b14f4935d1ffdf0

    • SSDEEP

      12288:f3iN2HGu81J1rn6hflA+2FjpwCK2gTGbQ:fyVu8nNgL2FlwCRgTG

    Score
    8/10
    persistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks