a4b3a691ce6a3e55440b9a847436f083662adf5ab5bcd5f171cec8ec643c64dc | Triage

Sharing

General

Target

7308c40d5f90648f542eadff5a8255ec_JaffaCakes118
Size

56KB
Sample

240726-hvt47ashkr
MD5

7308c40d5f90648f542eadff5a8255ec
SHA1

c93cb767338f0e6eb878edb5a83116eebe36d461
SHA256

a4b3a691ce6a3e55440b9a847436f083662adf5ab5bcd5f171cec8ec643c64dc
SHA512

8899f2129cd051bfd5d5f1d27156284eed86a0c9c6aacaac07ec80cc0b41c5d88a2b028c72c4bc36d5788ce1786c12647f93cbfd5a36798cd42849d46ddf7157
SSDEEP

768:A4JpVfMPCXp8psFM1EWND33jo7gSXeEN8kWbvNspVUQNO:bHMOp4fD3sfXVN8kWZspVUQ

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  7308c40d5f90648f542eadff5a8255ec_JaffaCakes118
- Size
  
  56KB
- MD5
  
  7308c40d5f90648f542eadff5a8255ec
- SHA1
  
  c93cb767338f0e6eb878edb5a83116eebe36d461
- SHA256
  
  a4b3a691ce6a3e55440b9a847436f083662adf5ab5bcd5f171cec8ec643c64dc
- SHA512
  
  8899f2129cd051bfd5d5f1d27156284eed86a0c9c6aacaac07ec80cc0b41c5d88a2b028c72c4bc36d5788ce1786c12647f93cbfd5a36798cd42849d46ddf7157
- SSDEEP
  
  768:A4JpVfMPCXp8psFM1EWND33jo7gSXeEN8kWbvNspVUQNO:bHMOp4fD3sfXVN8kWZspVUQ
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence