3c0856134e87d906f033175d566879e3981cbad76c064c835ef17245965f8fbe | Triage

Sharing

General

Target

ea47877f5cc0bd4440b8987a5b16e13c_JaffaCakes118
Size

385KB
Sample

240409-sl169adg9s
MD5

ea47877f5cc0bd4440b8987a5b16e13c
SHA1

9ca0e7f3602548e753974873ca2524cbdc2d8687
SHA256

3c0856134e87d906f033175d566879e3981cbad76c064c835ef17245965f8fbe
SHA512

6a7069d2ea7fdf44cdc13e2525094f05bf6a173f7c43ce46116378188e9fedb993b2f7786fa0a4c5538c321ed4460918589257c5b7cc72133790bba7af217977
SSDEEP

6144:CE4a022/zOSXxojKwFgD3aVJyPTQljcDb8MEuxDsDmNWQvcSQMfLJZ3A38B:R4a022/ySJHqVJyLQluSDhQ5QQlm38B

Score

7^/10

Malware Config

Targets

- Target
  
  ea47877f5cc0bd4440b8987a5b16e13c_JaffaCakes118
- Size
  
  385KB
- MD5
  
  ea47877f5cc0bd4440b8987a5b16e13c
- SHA1
  
  9ca0e7f3602548e753974873ca2524cbdc2d8687
- SHA256
  
  3c0856134e87d906f033175d566879e3981cbad76c064c835ef17245965f8fbe
- SHA512
  
  6a7069d2ea7fdf44cdc13e2525094f05bf6a173f7c43ce46116378188e9fedb993b2f7786fa0a4c5538c321ed4460918589257c5b7cc72133790bba7af217977
- SSDEEP
  
  6144:CE4a022/zOSXxojKwFgD3aVJyPTQljcDb8MEuxDsDmNWQvcSQMfLJZ3A38B:R4a022/ySJHqVJyLQluSDhQ5QQlm38B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2