Overview

overview

8

Static

static

3

791eaa4603...18.exe

windows7-x64

8

791eaa4603...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    791eaa460303325bda84d117b68f1a77_JaffaCakes118

  • Size

    626KB

  • Sample

    240727-wzszkssenj

  • MD5

    791eaa460303325bda84d117b68f1a77

  • SHA1

    882a5eb8e9d4363b932f4e963c172932e6767575

  • SHA256

    96dd4a46cc5c5957a770afe65105e03b0300e92996a0e21d87fd41160fad987c

  • SHA512

    e6b16aea3e5eac1706827fc7ba8b073217562eb36ce2dd2a4fb2cd77c9b988e8c305ee7f85b4cc7e4f7c798cb38d31e89f7dd66e68817be92b8cdf0a5f407095

  • SSDEEP

    12288:B8TYYvncgVhfc8oZSrGDmkX3CbiBNwRlRDfuqnqgB5esShK:bYnFoZSrGKkX3CbwERKqnPA1hK

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      791eaa460303325bda84d117b68f1a77_JaffaCakes118

    • Size

      626KB

    • MD5

      791eaa460303325bda84d117b68f1a77

    • SHA1

      882a5eb8e9d4363b932f4e963c172932e6767575

    • SHA256

      96dd4a46cc5c5957a770afe65105e03b0300e92996a0e21d87fd41160fad987c

    • SHA512

      e6b16aea3e5eac1706827fc7ba8b073217562eb36ce2dd2a4fb2cd77c9b988e8c305ee7f85b4cc7e4f7c798cb38d31e89f7dd66e68817be92b8cdf0a5f407095

    • SSDEEP

      12288:B8TYYvncgVhfc8oZSrGDmkX3CbiBNwRlRDfuqnqgB5esShK:bYnFoZSrGKkX3CbwERKqnPA1hK

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks