4781180a4d0419f1b9ce5c0f2598dfd08082585da5493ec6978e7bd3e0de8bd0 | Triage

Sharing

General

Target

a9882ca9f29376841c49f8a91ae86587_JaffaCakes118
Size

63KB
Sample

240819-erq2ksxbnq
MD5

a9882ca9f29376841c49f8a91ae86587
SHA1

9e96d6cca40be887a6c80d989ba10c30aefe28f6
SHA256

4781180a4d0419f1b9ce5c0f2598dfd08082585da5493ec6978e7bd3e0de8bd0
SHA512

2e29619773abfa3dfb7922c167a1e79e1855bc2cbd41d81b984ce7952f76775db676f743147019ea49ac4e788dd46f2921f75402e231f348e0d76d24668454b5
SSDEEP

1536:Pg7vBBJpwzRmfpCxQLMc8zvG8oaPJ7TFf0pobN8a:Pg7vBjpwzRKtAVTRjZTWpobX

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a9882ca9f29376841c49f8a91ae86587_JaffaCakes118
- Size
  
  63KB
- MD5
  
  a9882ca9f29376841c49f8a91ae86587
- SHA1
  
  9e96d6cca40be887a6c80d989ba10c30aefe28f6
- SHA256
  
  4781180a4d0419f1b9ce5c0f2598dfd08082585da5493ec6978e7bd3e0de8bd0
- SHA512
  
  2e29619773abfa3dfb7922c167a1e79e1855bc2cbd41d81b984ce7952f76775db676f743147019ea49ac4e788dd46f2921f75402e231f348e0d76d24668454b5
- SSDEEP
  
  1536:Pg7vBBJpwzRmfpCxQLMc8zvG8oaPJ7TFf0pobN8a:Pg7vBjpwzRKtAVTRjZTWpobX
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence