027bd599d9f8f3f826acab4acdaf0047bd634da4ba2fc27c37f923778b9264ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eda05adcd03d2a83c2c6a760c36dbcd6_JaffaCakes118
Size

385KB
Sample

240411-rpx4bsgd7t
MD5

eda05adcd03d2a83c2c6a760c36dbcd6
SHA1

38516cb00638327eca61a99c9150c2b13bd80bde
SHA256

027bd599d9f8f3f826acab4acdaf0047bd634da4ba2fc27c37f923778b9264ab
SHA512

6c46f59c1afac6f8ceb0005c42975246aaca7657d2c12ff02b9a860506f3aada6b4b8a90421c11528d1f04952d99afcd2156d4774f727f7aa632096e390835b0
SSDEEP

6144:jCbdMIS19IEQpA0m9jQdpySfiCg02Pu8nGHujd1GsB:cO5fHYA0eUySfiCg0Qu8nGO5YsB

Score

7^/10

Malware Config

Targets

- Target
  
  eda05adcd03d2a83c2c6a760c36dbcd6_JaffaCakes118
- Size
  
  385KB
- MD5
  
  eda05adcd03d2a83c2c6a760c36dbcd6
- SHA1
  
  38516cb00638327eca61a99c9150c2b13bd80bde
- SHA256
  
  027bd599d9f8f3f826acab4acdaf0047bd634da4ba2fc27c37f923778b9264ab
- SHA512
  
  6c46f59c1afac6f8ceb0005c42975246aaca7657d2c12ff02b9a860506f3aada6b4b8a90421c11528d1f04952d99afcd2156d4774f727f7aa632096e390835b0
- SSDEEP
  
  6144:jCbdMIS19IEQpA0m9jQdpySfiCg02Pu8nGHujd1GsB:cO5fHYA0eUySfiCg0Qu8nGO5YsB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2