5ff8ce8a13569e0d137148cfa98bf21f89f5414021b6934d46b5368da0000285 | Triage

Sharing

General

Target

331b1c5a4967e61aafefd2cb3719e8c1_JaffaCakes118
Size

59KB
Sample

240710-dtpqvstekj
MD5

331b1c5a4967e61aafefd2cb3719e8c1
SHA1

64062b0adf64e7be4a3d600857cbaa2f45d1d814
SHA256

5ff8ce8a13569e0d137148cfa98bf21f89f5414021b6934d46b5368da0000285
SHA512

dde94b1ffd3b86930b600f9a5b546344672fef3fc3c88d9974fd5f25f89d13c93e2610687ca33d91578dd5c66b2ba7a01b2309fc99e8b1e76340b9315e1424c5
SSDEEP

768:k9uvKRIrxcKOAgkQ74QVzxftX9m26PWY2L3U0povNI7ZANh9RBf9Z31KBu/11jHv:rzH8xzxtOWYx0po46XjBFCC4tGQNK

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  331b1c5a4967e61aafefd2cb3719e8c1_JaffaCakes118
- Size
  
  59KB
- MD5
  
  331b1c5a4967e61aafefd2cb3719e8c1
- SHA1
  
  64062b0adf64e7be4a3d600857cbaa2f45d1d814
- SHA256
  
  5ff8ce8a13569e0d137148cfa98bf21f89f5414021b6934d46b5368da0000285
- SHA512
  
  dde94b1ffd3b86930b600f9a5b546344672fef3fc3c88d9974fd5f25f89d13c93e2610687ca33d91578dd5c66b2ba7a01b2309fc99e8b1e76340b9315e1424c5
- SSDEEP
  
  768:k9uvKRIrxcKOAgkQ74QVzxftX9m26PWY2L3U0povNI7ZANh9RBf9Z31KBu/11jHv:rzH8xzxtOWYx0po46XjBFCC4tGQNK
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2