3d52521da0e8f1caa46eae1c8c149c8558dbec8555cdcf42d02e11d9aafbe019 | Triage

Sharing

General

Target

4913841abc981db6e7aeb84429c08591_JaffaCakes118
Size

236KB
Sample

240715-kr8jhsxhqj
MD5

4913841abc981db6e7aeb84429c08591
SHA1

0b957d5d8ad60f87d44d0a2db160f020e4c522d5
SHA256

3d52521da0e8f1caa46eae1c8c149c8558dbec8555cdcf42d02e11d9aafbe019
SHA512

9b6c0a2a6fab176e51dbeac71b3bea00d42ec359b27e861d877df40d695b43b4ac63125e6c8e072a4890d5f47b7f55be4ead5ea8a2e4d2ba45bc503f7d27a593
SSDEEP

6144:i8zgNLrtxHDRTq/iMmHkOw3fs4YFkhJbtGlwXI42/I/lu:inNLrtxHDRTqKtEOwPsGhxvIRIt

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  4913841abc981db6e7aeb84429c08591_JaffaCakes118
- Size
  
  236KB
- MD5
  
  4913841abc981db6e7aeb84429c08591
- SHA1
  
  0b957d5d8ad60f87d44d0a2db160f020e4c522d5
- SHA256
  
  3d52521da0e8f1caa46eae1c8c149c8558dbec8555cdcf42d02e11d9aafbe019
- SHA512
  
  9b6c0a2a6fab176e51dbeac71b3bea00d42ec359b27e861d877df40d695b43b4ac63125e6c8e072a4890d5f47b7f55be4ead5ea8a2e4d2ba45bc503f7d27a593
- SSDEEP
  
  6144:i8zgNLrtxHDRTq/iMmHkOw3fs4YFkhJbtGlwXI42/I/lu:inNLrtxHDRTqKtEOwPsGhxvIRIt
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2