Overview

overview

8

Static

static

3

70f53be09b...18.exe

windows7-x64

8

70f53be09b...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    70f53be09b5b26daadc37edd4a8020e5_JaffaCakes118

  • Size

    115KB

  • Sample

    240725-yektkszhkn

  • MD5

    70f53be09b5b26daadc37edd4a8020e5

  • SHA1

    d6ea6c9ffde54589e008c29b28500d24dcb20390

  • SHA256

    e9bf384f00ea88004d8ee3e3abdf68ccf4e5c5bfaa0c1f85565a8d30cad67a21

  • SHA512

    0e3025207bd80ab817afa24c0e9b63173cc0e88f32e6876dca779945b0d7f52b5e8738101d70272f8c4eca28c9a0bd185196375f6e7fcc01e6a001085f505a9f

  • SSDEEP

    3072:c0re1R6n98BlrSd1p7IeDX5LFOlOInSv46gJWLoC:5re1R6n98qdAo5ZwO8QFgJA

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      70f53be09b5b26daadc37edd4a8020e5_JaffaCakes118

    • Size

      115KB

    • MD5

      70f53be09b5b26daadc37edd4a8020e5

    • SHA1

      d6ea6c9ffde54589e008c29b28500d24dcb20390

    • SHA256

      e9bf384f00ea88004d8ee3e3abdf68ccf4e5c5bfaa0c1f85565a8d30cad67a21

    • SHA512

      0e3025207bd80ab817afa24c0e9b63173cc0e88f32e6876dca779945b0d7f52b5e8738101d70272f8c4eca28c9a0bd185196375f6e7fcc01e6a001085f505a9f

    • SSDEEP

      3072:c0re1R6n98BlrSd1p7IeDX5LFOlOInSv46gJWLoC:5re1R6n98qdAo5ZwO8QFgJA

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks