728b9e360b8b178081fd469adf507f0e38c5c1b262ba41d7883052b4f73eccfe | Triage

Sharing

General

Target

d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118
Size

123KB
Sample

240909-m47h4athnm
MD5

d62e5ed3a786be8f0d0d8490a1050db1
SHA1

38cf2d815b47a493a65b726086787c4c52c27090
SHA256

728b9e360b8b178081fd469adf507f0e38c5c1b262ba41d7883052b4f73eccfe
SHA512

202da1c325fdf937043aa2bbe1f291e30c5445edee6e50dbd597ac648c094d66331b018f9bee5c1e4af86c0213918f4fd4161d4775357574159442da5ec89d69
SSDEEP

3072:pewIaCNiEOVFDvKEM9jh1jItmjsLsdGSNpYwt86fymdRGE:8wIaCNiEOVVyhJunLssuYwt7TdRj

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d62e5ed3a786be8f0d0d8490a1050db1_JaffaCakes118
- Size
  
  123KB
- MD5
  
  d62e5ed3a786be8f0d0d8490a1050db1
- SHA1
  
  38cf2d815b47a493a65b726086787c4c52c27090
- SHA256
  
  728b9e360b8b178081fd469adf507f0e38c5c1b262ba41d7883052b4f73eccfe
- SHA512
  
  202da1c325fdf937043aa2bbe1f291e30c5445edee6e50dbd597ac648c094d66331b018f9bee5c1e4af86c0213918f4fd4161d4775357574159442da5ec89d69
- SSDEEP
  
  3072:pewIaCNiEOVFDvKEM9jh1jItmjsLsdGSNpYwt86fymdRGE:8wIaCNiEOVVyhJunLssuYwt7TdRj
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence