3e8db5b20a3e07f8229f4e2d07694331bb06ed0e9f40c2d684148e3aac49bbe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebf4483f0e40b44b3a45bced9add8ea2_JaffaCakes118
Size

702KB
Sample

240919-w8nq8athjl
MD5

ebf4483f0e40b44b3a45bced9add8ea2
SHA1

c2c69a14bc5cc89bac6fc4c09cc3b9144729407e
SHA256

3e8db5b20a3e07f8229f4e2d07694331bb06ed0e9f40c2d684148e3aac49bbe2
SHA512

41b1c7dc74c2dfb89b8a00b2a5b3f6ad5cd10d0829c4b4c9f0102228a0006c8398e919d3e22a4f260c31ca9db2cb36b9a1490b2f70e9b63dee8c027c9637978b
SSDEEP

12288:+p6hQgF0WEbDKUieV1wzAKfo2PBsFzVEF3Z4mxxxuxm1EZi9XxF9E2AG9:30WEnnhbwkaPPGgQmXIw1wi9D9E2Ag

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  ebf4483f0e40b44b3a45bced9add8ea2_JaffaCakes118
- Size
  
  702KB
- MD5
  
  ebf4483f0e40b44b3a45bced9add8ea2
- SHA1
  
  c2c69a14bc5cc89bac6fc4c09cc3b9144729407e
- SHA256
  
  3e8db5b20a3e07f8229f4e2d07694331bb06ed0e9f40c2d684148e3aac49bbe2
- SHA512
  
  41b1c7dc74c2dfb89b8a00b2a5b3f6ad5cd10d0829c4b4c9f0102228a0006c8398e919d3e22a4f260c31ca9db2cb36b9a1490b2f70e9b63dee8c027c9637978b
- SSDEEP
  
  12288:+p6hQgF0WEbDKUieV1wzAKfo2PBsFzVEF3Z4mxxxuxm1EZi9XxF9E2AG9:30WEnnhbwkaPPGgQmXIw1wi9D9E2Ag
Score

8^/10

persistence discovery
- Server Software Component: Terminal Services DLL
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence