549d561f4658daed0880a8e7580d84cf5b40b5096d10f4fc86c37603c5297209 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d481be83a6e5afc2d2f1658eed58d153_JaffaCakes118
Size

1.1MB
Sample

240908-q5ca5a1hmd
MD5

d481be83a6e5afc2d2f1658eed58d153
SHA1

c52b562bd7981452a926e51a1ff79553e896164d
SHA256

549d561f4658daed0880a8e7580d84cf5b40b5096d10f4fc86c37603c5297209
SHA512

21a2169fe51ebe3c3aafb54a2fed262bb25b9e72c12cbf357e9d8170252204222961ec0def91e3f6a4cc6bdc1d02412be7f04e7a3d770f9f5b3a09e9eaea46bf
SSDEEP

3072:zH8dK2Bz1UnOawKS9tXNi7ThDQruyhjfI9Yqvnc7BGcFtpSH8dK2:zck2a4di7ThDbuUc7JFuck2

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d481be83a6e5afc2d2f1658eed58d153_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  d481be83a6e5afc2d2f1658eed58d153
- SHA1
  
  c52b562bd7981452a926e51a1ff79553e896164d
- SHA256
  
  549d561f4658daed0880a8e7580d84cf5b40b5096d10f4fc86c37603c5297209
- SHA512
  
  21a2169fe51ebe3c3aafb54a2fed262bb25b9e72c12cbf357e9d8170252204222961ec0def91e3f6a4cc6bdc1d02412be7f04e7a3d770f9f5b3a09e9eaea46bf
- SSDEEP
  
  3072:zH8dK2Bz1UnOawKS9tXNi7ThDQruyhjfI9Yqvnc7BGcFtpSH8dK2:zck2a4di7ThDbuUc7JFuck2
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence