abca887fb0c5648f12ca4b9521edd986c5f84b974669c5909a3c9329fc5d155b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118
Size

385KB
Sample

240411-kjwjzsah8y
MD5

ed020ccc602a6cddc68c68fd9ad0a4c0
SHA1

a97ab4fcb1a66ced7274257057cdf306e141cf52
SHA256

abca887fb0c5648f12ca4b9521edd986c5f84b974669c5909a3c9329fc5d155b
SHA512

35da0ea8deed260036a31c9e132c859a7b9754eb8fb0df922a32b960fd12e7bed8251233ce636096a1c245c84ae581dd07cb63d06ba1316c7a61d929b4b59c0e
SSDEEP

12288:ng89U864M4ijdBHaRhxJgOle2iLzzeQGjQ8B:g8S864ijjHaRfe2sneQQQ8B

Score

7^/10

Malware Config

Targets

- Target
  
  ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118
- Size
  
  385KB
- MD5
  
  ed020ccc602a6cddc68c68fd9ad0a4c0
- SHA1
  
  a97ab4fcb1a66ced7274257057cdf306e141cf52
- SHA256
  
  abca887fb0c5648f12ca4b9521edd986c5f84b974669c5909a3c9329fc5d155b
- SHA512
  
  35da0ea8deed260036a31c9e132c859a7b9754eb8fb0df922a32b960fd12e7bed8251233ce636096a1c245c84ae581dd07cb63d06ba1316c7a61d929b4b59c0e
- SSDEEP
  
  12288:ng89U864M4ijdBHaRhxJgOle2iLzzeQGjQ8B:g8S864ijjHaRfe2sneQQQ8B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2