Overview

overview

8

Static

static

3

3e388d2865...18.dll

windows7-x64

8

3e388d2865...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e388d28658e65e91fdd0e907d7a107f_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241013-gwekfswhqq

  • MD5

    3e388d28658e65e91fdd0e907d7a107f

  • SHA1

    2b452ee85e19e4f7afeb2884609b0c71e85f779c

  • SHA256

    c40bdd194381f765a191f2ea46186b4b134efb4e3f231263643c8b536a7b752b

  • SHA512

    52d980124bf50ea75a9cc1d2b1060f8a9715c60fb72cd73069e31f81e68638fc55949b9c05dd53bc5ed8cba1a64521e32d9960e21952f58c110c82539e66fcae

  • SSDEEP

    3072:UGcL+PIrZUMMeWv/MpoJAfeK/+V1w6WvrrVic:4+kFM3v/eRbQWDr

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      3e388d28658e65e91fdd0e907d7a107f_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3e388d28658e65e91fdd0e907d7a107f

    • SHA1

      2b452ee85e19e4f7afeb2884609b0c71e85f779c

    • SHA256

      c40bdd194381f765a191f2ea46186b4b134efb4e3f231263643c8b536a7b752b

    • SHA512

      52d980124bf50ea75a9cc1d2b1060f8a9715c60fb72cd73069e31f81e68638fc55949b9c05dd53bc5ed8cba1a64521e32d9960e21952f58c110c82539e66fcae

    • SSDEEP

      3072:UGcL+PIrZUMMeWv/MpoJAfeK/+V1w6WvrrVic:4+kFM3v/eRbQWDr

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks