Overview

overview

8

Static

static

3

833a103c92...18.exe

windows7-x64

8

833a103c92...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    833a103c92fc361fd8ca4e349a462041_JaffaCakes118

  • Size

    166KB

  • Sample

    240802-gahd8aydnr

  • MD5

    833a103c92fc361fd8ca4e349a462041

  • SHA1

    3c65bcb18cd74b0efab2df37d0cc24392dabfc8c

  • SHA256

    32c0906a3d23830efaf54a9766c60f255c9c4cf95380a3a3f03662a8ff26c62a

  • SHA512

    de3001b408de91c0451df1d4a7d460076e2e1d53299e03a27e88cd15fefde5319e179ada047e43efbb36803a7b2ac51c101399c33a2b12368d57ee45eadcf54f

  • SSDEEP

    3072:aYzjME3FGaH4fe4MLajTYESkiXLXF1dTSWhieNhCS/KfaxkVoB:jUE3FGaH4F7jkE9CLXNTSWhieNh//Kfo

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      833a103c92fc361fd8ca4e349a462041_JaffaCakes118

    • Size

      166KB

    • MD5

      833a103c92fc361fd8ca4e349a462041

    • SHA1

      3c65bcb18cd74b0efab2df37d0cc24392dabfc8c

    • SHA256

      32c0906a3d23830efaf54a9766c60f255c9c4cf95380a3a3f03662a8ff26c62a

    • SHA512

      de3001b408de91c0451df1d4a7d460076e2e1d53299e03a27e88cd15fefde5319e179ada047e43efbb36803a7b2ac51c101399c33a2b12368d57ee45eadcf54f

    • SSDEEP

      3072:aYzjME3FGaH4fe4MLajTYESkiXLXF1dTSWhieNhCS/KfaxkVoB:jUE3FGaH4F7jkE9CLXNTSWhieNh//Kfo

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks