18bc77c410322c504561cfec1e7209e7a7184e84eaa68b29e4621b8d62e03cbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3e373bccb0a83c39097fb1100161ce1_JaffaCakes118
Size

771KB
Sample

240416-t7y5fsfa86
MD5

f3e373bccb0a83c39097fb1100161ce1
SHA1

27e0bf6dd86aaaf536465054e60487bda0057930
SHA256

18bc77c410322c504561cfec1e7209e7a7184e84eaa68b29e4621b8d62e03cbd
SHA512

cdf60b936a278d6e92258abbdd5d273dc40590393f334e5f1dd9e4e68c4b8927e43b099dbc5134d2cf1bc381d55d85c58978c5b1659a2cde7fac7acaa90547d7
SSDEEP

12288:eEI7kCX+OWVzyia77BOx7x5hOIitpJNMkuRVE4clmy1Jugu741LCxHWnxX7iYomQ:BgdIWLfDw4zmvZVtvZWqEIz6qrfiTMB

Score

7^/10

Malware Config

Targets

- Target
  
  f3e373bccb0a83c39097fb1100161ce1_JaffaCakes118
- Size
  
  771KB
- MD5
  
  f3e373bccb0a83c39097fb1100161ce1
- SHA1
  
  27e0bf6dd86aaaf536465054e60487bda0057930
- SHA256
  
  18bc77c410322c504561cfec1e7209e7a7184e84eaa68b29e4621b8d62e03cbd
- SHA512
  
  cdf60b936a278d6e92258abbdd5d273dc40590393f334e5f1dd9e4e68c4b8927e43b099dbc5134d2cf1bc381d55d85c58978c5b1659a2cde7fac7acaa90547d7
- SSDEEP
  
  12288:eEI7kCX+OWVzyia77BOx7x5hOIitpJNMkuRVE4clmy1Jugu741LCxHWnxX7iYomQ:BgdIWLfDw4zmvZVtvZWqEIz6qrfiTMB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2