e78273f745eede53191fd0deb4ad4a9c7d4da48fe6f60de49d4dfa4b7607d9af | Triage

Sharing

General

Target

38bb1e4a0c8201790ef1a52deb037c3c_JaffaCakes118
Size

98KB
Sample

240711-mey6essdnk
MD5

38bb1e4a0c8201790ef1a52deb037c3c
SHA1

202d90b7f01e6d58c6c06ad9c0b209230731857c
SHA256

e78273f745eede53191fd0deb4ad4a9c7d4da48fe6f60de49d4dfa4b7607d9af
SHA512

a8502fcbdd486b088d2c487704474f0124da21c6d11c8df9807ca16e240dd5812766ca39163a70e97d58284d7333516149f5be949a4d866ba59a1bb24a4b11dd
SSDEEP

3072:GKlu1kKu1kGzyVeaTa1q9Zlz9z5EP2DRTFI1:NEO9uIBILFU4m1

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  38bb1e4a0c8201790ef1a52deb037c3c_JaffaCakes118
- Size
  
  98KB
- MD5
  
  38bb1e4a0c8201790ef1a52deb037c3c
- SHA1
  
  202d90b7f01e6d58c6c06ad9c0b209230731857c
- SHA256
  
  e78273f745eede53191fd0deb4ad4a9c7d4da48fe6f60de49d4dfa4b7607d9af
- SHA512
  
  a8502fcbdd486b088d2c487704474f0124da21c6d11c8df9807ca16e240dd5812766ca39163a70e97d58284d7333516149f5be949a4d866ba59a1bb24a4b11dd
- SSDEEP
  
  3072:GKlu1kKu1kGzyVeaTa1q9Zlz9z5EP2DRTFI1:NEO9uIBILFU4m1
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2