Overview

overview

8

Static

static

3

d24d5085fd...18.exe

windows7-x64

8

d24d5085fd...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d24d5085fd0563cf1429ca9685720779_JaffaCakes118

  • Size

    137KB

  • Sample

    240907-tdjgxateqa

  • MD5

    d24d5085fd0563cf1429ca9685720779

  • SHA1

    09ce282b5b4ad839bd208a34f85f6dff39a0194b

  • SHA256

    28608bcc7b97c182db36108e29aaa36a7c128fadd1619a90a668ab2273fd3eac

  • SHA512

    ef6b67da05db2b2c634f75272ae075041e12b46e935188964d7b3ef5ab3357c91669132dcb30890074cf81d9a93582bb58b5c74fe749a765d2045bfa821d4ae6

  • SSDEEP

    3072:boGU2q4B/Q2kJk51HRD8/CqsJpELhMZ+XHjhPnHcqO7RBhBHi:boX2RB/Q6DDmcJpELhMZ+NPnHcqO7RBO

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      d24d5085fd0563cf1429ca9685720779_JaffaCakes118

    • Size

      137KB

    • MD5

      d24d5085fd0563cf1429ca9685720779

    • SHA1

      09ce282b5b4ad839bd208a34f85f6dff39a0194b

    • SHA256

      28608bcc7b97c182db36108e29aaa36a7c128fadd1619a90a668ab2273fd3eac

    • SHA512

      ef6b67da05db2b2c634f75272ae075041e12b46e935188964d7b3ef5ab3357c91669132dcb30890074cf81d9a93582bb58b5c74fe749a765d2045bfa821d4ae6

    • SSDEEP

      3072:boGU2q4B/Q2kJk51HRD8/CqsJpELhMZ+XHjhPnHcqO7RBhBHi:boX2RB/Q6DDmcJpELhMZ+NPnHcqO7RBO

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks