ca09ebe815ff0b125110d3897738f20b810dc0ffa0a14a33b25d454a935d386b | Triage

Sharing

General

Target

b166662818fcf7d781f0c4cbfe2c405f_JaffaCakes118
Size

63KB
Sample

240821-afpbdszgpe
MD5

b166662818fcf7d781f0c4cbfe2c405f
SHA1

18ef60839856beb27c18fb78240b71aa80348065
SHA256

ca09ebe815ff0b125110d3897738f20b810dc0ffa0a14a33b25d454a935d386b
SHA512

172977a127ab1929db94580a999e2cd86984b7b36742092128fce9b765df343d86c15ef10bbd3086daa4b254e5c3f1d8f91b1da576828dd93f3fcb7445d60355
SSDEEP

1536:vRX4+xYuwuL/kTcoS9gQrAHVQZZ0BdfvDyYWa85:vR4eBLsTcD9FZ0jXDyYe5

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b166662818fcf7d781f0c4cbfe2c405f_JaffaCakes118
- Size
  
  63KB
- MD5
  
  b166662818fcf7d781f0c4cbfe2c405f
- SHA1
  
  18ef60839856beb27c18fb78240b71aa80348065
- SHA256
  
  ca09ebe815ff0b125110d3897738f20b810dc0ffa0a14a33b25d454a935d386b
- SHA512
  
  172977a127ab1929db94580a999e2cd86984b7b36742092128fce9b765df343d86c15ef10bbd3086daa4b254e5c3f1d8f91b1da576828dd93f3fcb7445d60355
- SSDEEP
  
  1536:vRX4+xYuwuL/kTcoS9gQrAHVQZZ0BdfvDyYWa85:vR4eBLsTcD9FZ0jXDyYe5
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence