922f9ffedf68aca34e6e141db49d2bfc517ffdeb466faf7b6680b0c3e3d8f00c | Triage

Sharing

General

Target

73626110298d3b426842a568d229f973_JaffaCakes118
Size

1.1MB
Sample

240726-kw59ysxhnr
MD5

73626110298d3b426842a568d229f973
SHA1

41c969ac320c272c172821d5b13e840697409392
SHA256

922f9ffedf68aca34e6e141db49d2bfc517ffdeb466faf7b6680b0c3e3d8f00c
SHA512

a724355aa29d517d9c2ca60a9177bf53c2b69b0cfb55477a51a93f5ee8a02efac5c2550d03ae3b2ea452c697ec40157c1953ace2b0f2b61fba4f6658c0de5f03
SSDEEP

24576:SMpZ4OxwR1QcQq/W7ihb4bPWmBLXvPmVpTrdzjs00r:SuNZ7Ib8ZBL2/Xs

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  73626110298d3b426842a568d229f973_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  73626110298d3b426842a568d229f973
- SHA1
  
  41c969ac320c272c172821d5b13e840697409392
- SHA256
  
  922f9ffedf68aca34e6e141db49d2bfc517ffdeb466faf7b6680b0c3e3d8f00c
- SHA512
  
  a724355aa29d517d9c2ca60a9177bf53c2b69b0cfb55477a51a93f5ee8a02efac5c2550d03ae3b2ea452c697ec40157c1953ace2b0f2b61fba4f6658c0de5f03
- SSDEEP
  
  24576:SMpZ4OxwR1QcQq/W7ihb4bPWmBLXvPmVpTrdzjs00r:SuNZ7Ib8ZBL2/Xs
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence