368cb62588fc91261a16af9c60ae9a1fbcc5238c650775b99005a5b8f5689c97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9fd8e4c5f8de677e2dc227937be80a5_JaffaCakes118
Size

385KB
Sample

240409-pndl7aab7x
MD5

e9fd8e4c5f8de677e2dc227937be80a5
SHA1

f3ff5387120d7ebc9036ce9268a41610d8e94f18
SHA256

368cb62588fc91261a16af9c60ae9a1fbcc5238c650775b99005a5b8f5689c97
SHA512

a0e39576d1de97488614852aeebdf995473d2ffccfb2d8bb6fd166a4923da1bfeef08d449b24423237d565b32578db736e1b8c6ac3d5480977a7f80b80f75b85
SSDEEP

12288:P9vfqn79cQYGA5lwOHtX5dVmKKZ3bUfMvO7GyumfnjB:PKRcQYGwlJnjTMvztmPjB

Score

7^/10

Malware Config

Targets

- Target
  
  e9fd8e4c5f8de677e2dc227937be80a5_JaffaCakes118
- Size
  
  385KB
- MD5
  
  e9fd8e4c5f8de677e2dc227937be80a5
- SHA1
  
  f3ff5387120d7ebc9036ce9268a41610d8e94f18
- SHA256
  
  368cb62588fc91261a16af9c60ae9a1fbcc5238c650775b99005a5b8f5689c97
- SHA512
  
  a0e39576d1de97488614852aeebdf995473d2ffccfb2d8bb6fd166a4923da1bfeef08d449b24423237d565b32578db736e1b8c6ac3d5480977a7f80b80f75b85
- SSDEEP
  
  12288:P9vfqn79cQYGA5lwOHtX5dVmKKZ3bUfMvO7GyumfnjB:PKRcQYGwlJnjTMvztmPjB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2