3a985d5ff83965f70b0afd15675d25e552019d00025fbe7043576953f805f7e9 | Triage

Sharing

General

Target

4a6eedd3bd4c2af89b35caf419f5b4cb_JaffaCakes118
Size

573KB
Sample

240715-tqc6na1hlb
MD5

4a6eedd3bd4c2af89b35caf419f5b4cb
SHA1

41207281e568a971c7d540d59389fa7b6411d9dc
SHA256

3a985d5ff83965f70b0afd15675d25e552019d00025fbe7043576953f805f7e9
SHA512

7ae47277d0bb7267808e9ff05f58d225e22b22d66e2bd5f38813d3ed842eaa1ec3a7e244cc9ccd928d0cd06ef1d1d51c051aad2e6f6b9ead532d6f303467edb4
SSDEEP

12288:W0uJ8UM4D0Ca00HiOSsvufXO3d+FUVMjwGYubvaZzh:fo5DXa0uSsvIwd+FRsLubva

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  4a6eedd3bd4c2af89b35caf419f5b4cb_JaffaCakes118
- Size
  
  573KB
- MD5
  
  4a6eedd3bd4c2af89b35caf419f5b4cb
- SHA1
  
  41207281e568a971c7d540d59389fa7b6411d9dc
- SHA256
  
  3a985d5ff83965f70b0afd15675d25e552019d00025fbe7043576953f805f7e9
- SHA512
  
  7ae47277d0bb7267808e9ff05f58d225e22b22d66e2bd5f38813d3ed842eaa1ec3a7e244cc9ccd928d0cd06ef1d1d51c051aad2e6f6b9ead532d6f303467edb4
- SSDEEP
  
  12288:W0uJ8UM4D0Ca00HiOSsvufXO3d+FUVMjwGYubvaZzh:fo5DXa0uSsvIwd+FRsLubva
Score

8^/10

persistence
- Server Software Component: Terminal Services DLL
  persistence
- Sets service image path in registry
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Server Software Component

Terminal Services DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2