3b03a0fee60c5f99ca1ad7654a3d747fb4853c92235fe193f5d3bbac82976be6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2286fe0568cb9bd3341f57db83a286b_JaffaCakes118
Size

1000KB
Sample

240415-3cbv4sba62
MD5

f2286fe0568cb9bd3341f57db83a286b
SHA1

a3d796511c9023065696e5db98199e047673fc70
SHA256

3b03a0fee60c5f99ca1ad7654a3d747fb4853c92235fe193f5d3bbac82976be6
SHA512

e1299b365b5aa4a4979282212416b451a05f7e3150c8dc9434bcd0188b1f61360491023acb000d50232c61f45b7122d67bc5495c25b698b5e49938040c9d3be1
SSDEEP

24576:eHNyvtAIkshSBERPF9FxJfxt0TDXi1B+5vMiqt0gj2ed:eHktfLhZfxKTD4qOL

Score

7^/10

Malware Config

Targets

- Target
  
  f2286fe0568cb9bd3341f57db83a286b_JaffaCakes118
- Size
  
  1000KB
- MD5
  
  f2286fe0568cb9bd3341f57db83a286b
- SHA1
  
  a3d796511c9023065696e5db98199e047673fc70
- SHA256
  
  3b03a0fee60c5f99ca1ad7654a3d747fb4853c92235fe193f5d3bbac82976be6
- SHA512
  
  e1299b365b5aa4a4979282212416b451a05f7e3150c8dc9434bcd0188b1f61360491023acb000d50232c61f45b7122d67bc5495c25b698b5e49938040c9d3be1
- SSDEEP
  
  24576:eHNyvtAIkshSBERPF9FxJfxt0TDXi1B+5vMiqt0gj2ed:eHktfLhZfxKTD4qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2