Overview

overview

8

Static

static

3

4b1181b447...18.exe

windows7-x64

8

4b1181b447...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b1181b44748a0edc5b4d95916382848_JaffaCakes118

  • Size

    139KB

  • Sample

    240715-x39xyavhjq

  • MD5

    4b1181b44748a0edc5b4d95916382848

  • SHA1

    a1d68f8417ea6440acf82a6c5664bcad56b1d509

  • SHA256

    5853e4f131de097285728bb2ac0f3a7e2e3b457a98aa528980cd3b05d98e2d95

  • SHA512

    8a8f8465691d68df0464e895ca4a2f0719d9479a87bfd373898c369442dd0493422f98b0a02910fd092ec75a937eb62d4af45b03d9af4fd6cec88c2986ba0aee

  • SSDEEP

    3072:zH+Mcv5JXXieDEvy1W7rkD+bnAIhRjaNn:zHl0ndEqgkCAaRG9

Score
8/10
persistence

Malware Config

Targets

    • Target

      4b1181b44748a0edc5b4d95916382848_JaffaCakes118

    • Size

      139KB

    • MD5

      4b1181b44748a0edc5b4d95916382848

    • SHA1

      a1d68f8417ea6440acf82a6c5664bcad56b1d509

    • SHA256

      5853e4f131de097285728bb2ac0f3a7e2e3b457a98aa528980cd3b05d98e2d95

    • SHA512

      8a8f8465691d68df0464e895ca4a2f0719d9479a87bfd373898c369442dd0493422f98b0a02910fd092ec75a937eb62d4af45b03d9af4fd6cec88c2986ba0aee

    • SSDEEP

      3072:zH+Mcv5JXXieDEvy1W7rkD+bnAIhRjaNn:zHl0ndEqgkCAaRG9

    Score
    8/10
    persistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks