Overview

overview

8

Static

static

3

81c62d55a6...18.exe

windows7-x64

8

81c62d55a6...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81c62d55a6ba31c41d4d4afc53d3add2_JaffaCakes118

  • Size

    216KB

  • Sample

    240801-z3xnqawfpr

  • MD5

    81c62d55a6ba31c41d4d4afc53d3add2

  • SHA1

    e14d48832fb77539ec8ac3095f95d20389a1111f

  • SHA256

    70fd7bdd336a3af25779015e3abeef084cbc35d38e0ee3f80b665dea5e91066c

  • SHA512

    42fcebee391bec94de0748c9ea8588a4ddc69e9e64b9edf9f3975da24f824dd46c9f02eca8a6048276a899cf86b72602e02e2e50182b2372ef5a138d8416b60a

  • SSDEEP

    6144:aMz19xEBlWWNOMxh+Sxpxi/5sAd29A4Hawl7yL3Or:aWxEKu/+Sm5d29PHh7N

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      81c62d55a6ba31c41d4d4afc53d3add2_JaffaCakes118

    • Size

      216KB

    • MD5

      81c62d55a6ba31c41d4d4afc53d3add2

    • SHA1

      e14d48832fb77539ec8ac3095f95d20389a1111f

    • SHA256

      70fd7bdd336a3af25779015e3abeef084cbc35d38e0ee3f80b665dea5e91066c

    • SHA512

      42fcebee391bec94de0748c9ea8588a4ddc69e9e64b9edf9f3975da24f824dd46c9f02eca8a6048276a899cf86b72602e02e2e50182b2372ef5a138d8416b60a

    • SSDEEP

      6144:aMz19xEBlWWNOMxh+Sxpxi/5sAd29A4Hawl7yL3Or:aWxEKu/+Sm5d29PHh7N

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks