Overview

overview

10

Static

static

10

JaffaCakes...d1.dll

windows7-x64

8

JaffaCakes...d1.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4bbb80e7099b9322b8eb2d7a4e1fb6d1

  • Size

    109KB

  • Sample

    250128-rf53ks1kht

  • MD5

    4bbb80e7099b9322b8eb2d7a4e1fb6d1

  • SHA1

    7932d916fe6ac7c1ac99bd3402b11ba0c02d382a

  • SHA256

    cb831f67bfdfb408fe18ddeacf31a36cb3b3285850d335d68c92bdc7ad8a2f8e

  • SHA512

    7da90717890720a786988805475fb6827f4ed36a7bc86dcda792e650868e2d4287d790307b49d154421a8dc16012afcb06766f2e47705c284e33d918a088d2d9

  • SSDEEP

    1536:QmTUSV4SibNr8YIaT024cKau2f9d0RKd+NvP+mHm:kS2SiyYI924Wug9d0y+lP+mHm

Score
10/10
gh0stratdiscoverypersistence

Malware Config

Targets

    • Target

      JaffaCakes118_4bbb80e7099b9322b8eb2d7a4e1fb6d1

    • Size

      109KB

    • MD5

      4bbb80e7099b9322b8eb2d7a4e1fb6d1

    • SHA1

      7932d916fe6ac7c1ac99bd3402b11ba0c02d382a

    • SHA256

      cb831f67bfdfb408fe18ddeacf31a36cb3b3285850d335d68c92bdc7ad8a2f8e

    • SHA512

      7da90717890720a786988805475fb6827f4ed36a7bc86dcda792e650868e2d4287d790307b49d154421a8dc16012afcb06766f2e47705c284e33d918a088d2d9

    • SSDEEP

      1536:QmTUSV4SibNr8YIaT024cKau2f9d0RKd+NvP+mHm:kS2SiyYI924Wug9d0y+lP+mHm

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks