f937d1102df2675e8832c45690f2a74f48dffe15abf83b4353bf185228f803ce | Triage

Sharing

General

Target

eca0c75ad84c5a2b3e3f5553000bcaa9_JaffaCakes118
Size

385KB
Sample

240411-emmtcseh61
MD5

eca0c75ad84c5a2b3e3f5553000bcaa9
SHA1

fb2c0abc14dbeeb3efd7a7110ae0acc1794c3ecd
SHA256

f937d1102df2675e8832c45690f2a74f48dffe15abf83b4353bf185228f803ce
SHA512

951c6785ac4934c738bac5ba21b601d4390f60f384c1e0fad830b749f2bf1dfba85b5777e4e7253fb3ee91d86c6066352efaa0efca3143f4ee95514e063c7c39
SSDEEP

12288:I/9pqad3vXQp9nJTmrrU5y6BUqMn3wQkJa/B0togGJXQEBB:IFDIrJ6nUrUqMn3wQZp0togABB

Score

7^/10

Malware Config

Targets

- Target
  
  eca0c75ad84c5a2b3e3f5553000bcaa9_JaffaCakes118
- Size
  
  385KB
- MD5
  
  eca0c75ad84c5a2b3e3f5553000bcaa9
- SHA1
  
  fb2c0abc14dbeeb3efd7a7110ae0acc1794c3ecd
- SHA256
  
  f937d1102df2675e8832c45690f2a74f48dffe15abf83b4353bf185228f803ce
- SHA512
  
  951c6785ac4934c738bac5ba21b601d4390f60f384c1e0fad830b749f2bf1dfba85b5777e4e7253fb3ee91d86c6066352efaa0efca3143f4ee95514e063c7c39
- SSDEEP
  
  12288:I/9pqad3vXQp9nJTmrrU5y6BUqMn3wQkJa/B0togGJXQEBB:IFDIrJ6nUrUqMn3wQZp0togABB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2