019c94173d52e739b82bf3e74c53c81510a187b2e79bef1a1ed428302eef23b9 | Triage

Sharing

General

Target

e7c20b752fb934983cdc320ac4e22e9f_JaffaCakes118
Size

907KB
Sample

240408-sk5s2scc69
MD5

e7c20b752fb934983cdc320ac4e22e9f
SHA1

1d9178faf890b0a4420f95b3f3ca4b529b730894
SHA256

019c94173d52e739b82bf3e74c53c81510a187b2e79bef1a1ed428302eef23b9
SHA512

5d0e47bda899537f4d161062283b706353f7a4b0d2cf73b07f4f56bdaf758ff165824f25cc5784f30f6bd0427c6759f89fad926eabf682bc0a5b9dc19e1a56c0
SSDEEP

24576:sqPqdo64ignGKODSQOpHE4a90GUikDA96oa/ZS1:swqo64PlO0HE4a90GkhogS

Score

7^/10

Malware Config

Targets

- Target
  
  e7c20b752fb934983cdc320ac4e22e9f_JaffaCakes118
- Size
  
  907KB
- MD5
  
  e7c20b752fb934983cdc320ac4e22e9f
- SHA1
  
  1d9178faf890b0a4420f95b3f3ca4b529b730894
- SHA256
  
  019c94173d52e739b82bf3e74c53c81510a187b2e79bef1a1ed428302eef23b9
- SHA512
  
  5d0e47bda899537f4d161062283b706353f7a4b0d2cf73b07f4f56bdaf758ff165824f25cc5784f30f6bd0427c6759f89fad926eabf682bc0a5b9dc19e1a56c0
- SSDEEP
  
  24576:sqPqdo64ignGKODSQOpHE4a90GUikDA96oa/ZS1:swqo64PlO0HE4a90GkhogS
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2