gh0strat | 5753979caf0c4710562376ac2f3d1b843c42e54b6581c344981e0506c81b0211 | Triage

Sharing

General

Target

3e50c26aac724c6df9f3837230582f87_JaffaCakes118
Size

124KB
Sample

240712-wjje7swelf
MD5

3e50c26aac724c6df9f3837230582f87
SHA1

7a35b4fb6e5a82f3b2331f4b33b11a080b8e9ee1
SHA256

5753979caf0c4710562376ac2f3d1b843c42e54b6581c344981e0506c81b0211
SHA512

e0f3682da443cd6248fb61faff9a6392f1b2ccd5a132e6f677b5e0f81bacd97c21a458c22429dd3e293c8d0e192875b35ab1ad15a9e26c2c6f0cd774d5651f67
SSDEEP

3072:x8nY50gePA/UHMd7PLUKa+fB5dnUASYVMq2xoN7hB3Z:ijPY8ULUPG5xbSaMqHphFZ

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  3e50c26aac724c6df9f3837230582f87_JaffaCakes118
- Size
  
  124KB
- MD5
  
  3e50c26aac724c6df9f3837230582f87
- SHA1
  
  7a35b4fb6e5a82f3b2331f4b33b11a080b8e9ee1
- SHA256
  
  5753979caf0c4710562376ac2f3d1b843c42e54b6581c344981e0506c81b0211
- SHA512
  
  e0f3682da443cd6248fb61faff9a6392f1b2ccd5a132e6f677b5e0f81bacd97c21a458c22429dd3e293c8d0e192875b35ab1ad15a9e26c2c6f0cd774d5651f67
- SSDEEP
  
  3072:x8nY50gePA/UHMd7PLUKa+fB5dnUASYVMq2xoN7hB3Z:ijPY8ULUPG5xbSaMqHphFZ
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2