Overview

overview

8

Static

static

3

adad95b630...18.exe

windows7-x64

8

adad95b630...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    adad95b630c569d1106edbcec0cdc678_JaffaCakes118

  • Size

    275KB

  • Sample

    240820-dr3vps1cpd

  • MD5

    adad95b630c569d1106edbcec0cdc678

  • SHA1

    869d0ddb045911164b06535cfc8d7ff53f7a1561

  • SHA256

    85701c780d709fe8cd10384ffc713e5d35494bf4a3fa275884f8dd8399bf1ee0

  • SHA512

    d283cd7438a6f59aa1c2761aee17ef1a8206abe29638ba8218ce5669102fe7efcb038b6b2d3da4ed4ffbdecbe40a17882867487e460c94fea4fa11a203669d8c

  • SSDEEP

    6144:5vQmMo/ToUatMubNawb9VOExRCiMOEoA/zPqGjfRpo:NQlWToXlbswb9VOExxLEB7PdfRp

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      adad95b630c569d1106edbcec0cdc678_JaffaCakes118

    • Size

      275KB

    • MD5

      adad95b630c569d1106edbcec0cdc678

    • SHA1

      869d0ddb045911164b06535cfc8d7ff53f7a1561

    • SHA256

      85701c780d709fe8cd10384ffc713e5d35494bf4a3fa275884f8dd8399bf1ee0

    • SHA512

      d283cd7438a6f59aa1c2761aee17ef1a8206abe29638ba8218ce5669102fe7efcb038b6b2d3da4ed4ffbdecbe40a17882867487e460c94fea4fa11a203669d8c

    • SSDEEP

      6144:5vQmMo/ToUatMubNawb9VOExRCiMOEoA/zPqGjfRpo:NQlWToXlbswb9VOExxLEB7PdfRp

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks