gh0strat | c2fa762ec8e7d274fa65fa28209cdb6bbb16191801df5691e5c390d89d6c0550 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e4814966c120bf2aa57e18f5c3bb3c_JaffaCakes118
Size

108KB
Sample

240710-jwddhawcll
MD5

33e4814966c120bf2aa57e18f5c3bb3c
SHA1

7bcf0dc6df027cb631cd0b42ca4995d3ad02b7a2
SHA256

c2fa762ec8e7d274fa65fa28209cdb6bbb16191801df5691e5c390d89d6c0550
SHA512

3e3911acb27b30ee0fe05194e07a0bef3b1eb5ba61584d9f720c60753fe374e90d8d1a2e405c41fce05a3b0d898cad2a6c476a156804ede178268f4500eb3cb0
SSDEEP

1536:31d7ZKo1aV+78bBbpt/ppkhc6dcMnyfha0/My1OaIHM/CKJhOI:Fd7ZJ11SQc6dXnEha0Ey1OaIHM/CKJhH

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  33e4814966c120bf2aa57e18f5c3bb3c_JaffaCakes118
- Size
  
  108KB
- MD5
  
  33e4814966c120bf2aa57e18f5c3bb3c
- SHA1
  
  7bcf0dc6df027cb631cd0b42ca4995d3ad02b7a2
- SHA256
  
  c2fa762ec8e7d274fa65fa28209cdb6bbb16191801df5691e5c390d89d6c0550
- SHA512
  
  3e3911acb27b30ee0fe05194e07a0bef3b1eb5ba61584d9f720c60753fe374e90d8d1a2e405c41fce05a3b0d898cad2a6c476a156804ede178268f4500eb3cb0
- SSDEEP
  
  1536:31d7ZKo1aV+78bBbpt/ppkhc6dcMnyfha0/My1OaIHM/CKJhOI:Fd7ZJ11SQc6dXnEha0Ey1OaIHM/CKJhH
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2