ff7e95cbb95ea4319fc09d1cbebc148237e303603901a7004411ae088de25a6e | Triage

Sharing

General

Target

3a16d4e2813a64073192f5d43d198f26_JaffaCakes118
Size

81KB
Sample

240711-v319payhna
MD5

3a16d4e2813a64073192f5d43d198f26
SHA1

1ea1b0342f2f4953b80fc3ccd713d496da103168
SHA256

ff7e95cbb95ea4319fc09d1cbebc148237e303603901a7004411ae088de25a6e
SHA512

5579f35e034e123f90d4f94e75bc924122cf4ca1b5b532b58a90df52197cba672ffe531c4bdd041226b41960f5d55555edd52289cf34c39f79bb2fa93f13044b
SSDEEP

1536:f958UEfYVP/CUiqJA8ickdNqGJbNL0fHppofzOhk3UvBTgVVQav6WRl:fAUWIP/C9oVi5d3tNlfzOefV6fAl

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3a16d4e2813a64073192f5d43d198f26_JaffaCakes118
- Size
  
  81KB
- MD5
  
  3a16d4e2813a64073192f5d43d198f26
- SHA1
  
  1ea1b0342f2f4953b80fc3ccd713d496da103168
- SHA256
  
  ff7e95cbb95ea4319fc09d1cbebc148237e303603901a7004411ae088de25a6e
- SHA512
  
  5579f35e034e123f90d4f94e75bc924122cf4ca1b5b532b58a90df52197cba672ffe531c4bdd041226b41960f5d55555edd52289cf34c39f79bb2fa93f13044b
- SSDEEP
  
  1536:f958UEfYVP/CUiqJA8ickdNqGJbNL0fHppofzOhk3UvBTgVVQav6WRl:fAUWIP/C9oVi5d3tNlfzOefV6fAl
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2