e9509c6dcba71629e7222f33a139862153e08a794991a5a72c397aa53a84af98 | Triage

Sharing

General

Target

28b1a8a19fd6c187258c9d8710c6ec7d_JaffaCakes118
Size

118KB
Sample

241009-b8ywza1akm
MD5

28b1a8a19fd6c187258c9d8710c6ec7d
SHA1

d878421bda03c0ac944713307abb4fc452d5a490
SHA256

e9509c6dcba71629e7222f33a139862153e08a794991a5a72c397aa53a84af98
SHA512

60ed1808767a83ebc3e0323fb83e4f310f6779363d36956d59819bc3844f4c3fbc7f244c861b09dd5705f0b8280cf2d669e5d2b8cc8428b852e2dfc804e00c3a
SSDEEP

1536:qChTmJ2giM6w2tDJzQSEcbgUbawr8kYDIO2FnToIfR2:4J2hJzAcE4awrMl2tTBfR2

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  28b1a8a19fd6c187258c9d8710c6ec7d_JaffaCakes118
- Size
  
  118KB
- MD5
  
  28b1a8a19fd6c187258c9d8710c6ec7d
- SHA1
  
  d878421bda03c0ac944713307abb4fc452d5a490
- SHA256
  
  e9509c6dcba71629e7222f33a139862153e08a794991a5a72c397aa53a84af98
- SHA512
  
  60ed1808767a83ebc3e0323fb83e4f310f6779363d36956d59819bc3844f4c3fbc7f244c861b09dd5705f0b8280cf2d669e5d2b8cc8428b852e2dfc804e00c3a
- SSDEEP
  
  1536:qChTmJ2giM6w2tDJzQSEcbgUbawr8kYDIO2FnToIfR2:4J2hJzAcE4awrMl2tTBfR2
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence