9d605a8e77b9c04821db49d620394c9cd0d576f9298c1b40a1f3018dc5f7d368 | Triage

Sharing

General

Target

f17157fd45b6160533814091c7055ca9_JaffaCakes118
Size

385KB
Sample

240415-tfk4hscf21
MD5

f17157fd45b6160533814091c7055ca9
SHA1

44e6cb47b7318830a38c9f5ad8f6ad6a20e1d790
SHA256

9d605a8e77b9c04821db49d620394c9cd0d576f9298c1b40a1f3018dc5f7d368
SHA512

8df6bef2e25068b1787660abed38780f0a4ad062c912dbff409bd79a53856be551285d4621ef602797cd3454c596ef00ba82ec910fa2197579fd0738dc31007e
SSDEEP

6144:sB4Yw8AOBuo0JMSiVdl8Aj2EYI2QMhROjL3G9AERu5FBuPEi88+UOFYNa3oB:sBd/Eo0bwtjnT6amA7TufFYoB

Score

7^/10

Malware Config

Targets

- Target
  
  f17157fd45b6160533814091c7055ca9_JaffaCakes118
- Size
  
  385KB
- MD5
  
  f17157fd45b6160533814091c7055ca9
- SHA1
  
  44e6cb47b7318830a38c9f5ad8f6ad6a20e1d790
- SHA256
  
  9d605a8e77b9c04821db49d620394c9cd0d576f9298c1b40a1f3018dc5f7d368
- SHA512
  
  8df6bef2e25068b1787660abed38780f0a4ad062c912dbff409bd79a53856be551285d4621ef602797cd3454c596ef00ba82ec910fa2197579fd0738dc31007e
- SSDEEP
  
  6144:sB4Yw8AOBuo0JMSiVdl8Aj2EYI2QMhROjL3G9AERu5FBuPEi88+UOFYNa3oB:sBd/Eo0bwtjnT6amA7TufFYoB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2