Overview

overview

8

Static

static

3

e14d680a64...18.exe

windows7-x64

8

e14d680a64...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e14d680a6472d32379ce8a51d5d88d56_JaffaCakes118

  • Size

    222KB

  • Sample

    240915-abg2hsvclb

  • MD5

    e14d680a6472d32379ce8a51d5d88d56

  • SHA1

    bedef6f3bf78b34e5a4a66d2871deed0b6789145

  • SHA256

    33db3dce9084c90d6632a6da16718ac9031c323e17226bade17d6d0e6f6baa64

  • SHA512

    deaf8d70888d9719fa582e52d02577ccda07cc8cfffaa4df32d8bed1829294a63b59a2b4a6e8d833355a702f3b2bdceb0dac8962ca1480a89c9a3fa9a3f2473d

  • SSDEEP

    6144:7sapZkI9bWFTz8oFkc4FhjUNgHRXTwPfwC:rkI1W5Fkc0ztT+wC

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      e14d680a6472d32379ce8a51d5d88d56_JaffaCakes118

    • Size

      222KB

    • MD5

      e14d680a6472d32379ce8a51d5d88d56

    • SHA1

      bedef6f3bf78b34e5a4a66d2871deed0b6789145

    • SHA256

      33db3dce9084c90d6632a6da16718ac9031c323e17226bade17d6d0e6f6baa64

    • SHA512

      deaf8d70888d9719fa582e52d02577ccda07cc8cfffaa4df32d8bed1829294a63b59a2b4a6e8d833355a702f3b2bdceb0dac8962ca1480a89c9a3fa9a3f2473d

    • SSDEEP

      6144:7sapZkI9bWFTz8oFkc4FhjUNgHRXTwPfwC:rkI1W5Fkc0ztT+wC

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks