Overview

overview

8

Static

static

3

a2c828a578...18.exe

windows7-x64

8

a2c828a578...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a2c828a5785d4c93e3d61ada08a73674_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240817-q4zd9s1grp

  • MD5

    a2c828a5785d4c93e3d61ada08a73674

  • SHA1

    cd49e2be04e1bea2d12fc334fdf1ae749422bca1

  • SHA256

    3826140a5531868339256e5ebc447f4bdb8f8ab6be1592246f876fe71c716d7d

  • SHA512

    9427dea4bfdacae8151cc560cb3c066491740c2ab54ea18cbe0ccb1e5f5dfa1e53238c5599c997e77933fcd75be94231ce75da3047c09a8002bbe1cb2f2469dd

  • SSDEEP

    24576:9qPNm60cTkAdDiEutf6eOMlsSDf6xnChdQ69W+hceVmtlUm+hSavmj:9qVRTzKyeOMG0fUnK59Wc5mtlUhw

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      a2c828a5785d4c93e3d61ada08a73674_JaffaCakes118

    • Size

      1.4MB

    • MD5

      a2c828a5785d4c93e3d61ada08a73674

    • SHA1

      cd49e2be04e1bea2d12fc334fdf1ae749422bca1

    • SHA256

      3826140a5531868339256e5ebc447f4bdb8f8ab6be1592246f876fe71c716d7d

    • SHA512

      9427dea4bfdacae8151cc560cb3c066491740c2ab54ea18cbe0ccb1e5f5dfa1e53238c5599c997e77933fcd75be94231ce75da3047c09a8002bbe1cb2f2469dd

    • SSDEEP

      24576:9qPNm60cTkAdDiEutf6eOMlsSDf6xnChdQ69W+hceVmtlUm+hSavmj:9qVRTzKyeOMG0fUnK59Wc5mtlUhw

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks