754f95253cb20bce90718f52942eb0caf87c2733d6b509fd511e75edb1c4c332 | Triage

Sharing

General

Target

34d6210de096688e9a178ed8e814a3b2_JaffaCakes118
Size

324KB
Sample

240710-qbq77a1hjd
MD5

34d6210de096688e9a178ed8e814a3b2
SHA1

5f62b041f29565fa0fc88640055c5b6075d444f3
SHA256

754f95253cb20bce90718f52942eb0caf87c2733d6b509fd511e75edb1c4c332
SHA512

46e0694ed703d0f82811f610d496ff6e84abfde801caa40c7ca69b0891f0e34b147af0cdb72046a2ec70e41b04b3a5bebe858a8356cc32b2e97b555a907b4843
SSDEEP

6144:l8pyQF/55zAzlUTC75Q7ZKYpku2Cp1PwKE2bmF/xyErNL+AeIGaMyaQmbH:K3/55zAJUTuGKU55E2iCQmj

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  34d6210de096688e9a178ed8e814a3b2_JaffaCakes118
- Size
  
  324KB
- MD5
  
  34d6210de096688e9a178ed8e814a3b2
- SHA1
  
  5f62b041f29565fa0fc88640055c5b6075d444f3
- SHA256
  
  754f95253cb20bce90718f52942eb0caf87c2733d6b509fd511e75edb1c4c332
- SHA512
  
  46e0694ed703d0f82811f610d496ff6e84abfde801caa40c7ca69b0891f0e34b147af0cdb72046a2ec70e41b04b3a5bebe858a8356cc32b2e97b555a907b4843
- SSDEEP
  
  6144:l8pyQF/55zAzlUTC75Q7ZKYpku2Cp1PwKE2bmF/xyErNL+AeIGaMyaQmbH:K3/55zAJUTuGKU55E2iCQmj
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2