bb33e53eedb59aa3f8dc7236075e605b4b108daf70b65556c0c2f0d6ba8f696f | Triage

Sharing

General

Target

ebd1cd3f4632fa916367b2273db3e429_JaffaCakes118
Size

385KB
Sample

240410-x6qngace6t
MD5

ebd1cd3f4632fa916367b2273db3e429
SHA1

06a55b57069fd9a75df8d512c56b9fd257498e88
SHA256

bb33e53eedb59aa3f8dc7236075e605b4b108daf70b65556c0c2f0d6ba8f696f
SHA512

5e890b3ae2feea1729a73a6d0eebc68709c2b0d776769c087dc658fb537360e2b538c32e7eb25e9fbf58589f756f11c164d1e1a599be5ab443a76f1673dce181
SSDEEP

12288:+c6li/PNyxiZwxkcYGIyAR5QghZeDHUvhYB:+cXNyxdx/lIyARXhADBB

Score

7^/10

Malware Config

Targets

- Target
  
  ebd1cd3f4632fa916367b2273db3e429_JaffaCakes118
- Size
  
  385KB
- MD5
  
  ebd1cd3f4632fa916367b2273db3e429
- SHA1
  
  06a55b57069fd9a75df8d512c56b9fd257498e88
- SHA256
  
  bb33e53eedb59aa3f8dc7236075e605b4b108daf70b65556c0c2f0d6ba8f696f
- SHA512
  
  5e890b3ae2feea1729a73a6d0eebc68709c2b0d776769c087dc658fb537360e2b538c32e7eb25e9fbf58589f756f11c164d1e1a599be5ab443a76f1673dce181
- SSDEEP
  
  12288:+c6li/PNyxiZwxkcYGIyAR5QghZeDHUvhYB:+cXNyxdx/lIyARXhADBB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2