df4dfd0c2785d823d1979ee65a4acad375f33291f6b632b8a8c2f1ddab60c3cd | Triage

Sharing

General

Target

f438a674ff0fb7f52463da53ddd106cf_JaffaCakes118
Size

385KB
Sample

240416-yq7gqabb95
MD5

f438a674ff0fb7f52463da53ddd106cf
SHA1

ac3079deaed5bbae3148fc2a865143041bee0011
SHA256

df4dfd0c2785d823d1979ee65a4acad375f33291f6b632b8a8c2f1ddab60c3cd
SHA512

aaed0dd1dc1fcb9e19c32df5a6b3861f798aafe7799510a437e548fc3a2d578fbb682cff9c74ccfb484735b17b4c40ad36891710ec3bc155b433954daf64f127
SSDEEP

6144:Piu1LWKLrJCWSFYQhj7JQsO8x1SO9IqdGWFco8isYPqUYkbVjGUJspW8lagxjI+q:PioC8JCW4pjg8x1SO7GaYk9GZptJxgB

Score

7^/10

Malware Config

Targets

- Target
  
  f438a674ff0fb7f52463da53ddd106cf_JaffaCakes118
- Size
  
  385KB
- MD5
  
  f438a674ff0fb7f52463da53ddd106cf
- SHA1
  
  ac3079deaed5bbae3148fc2a865143041bee0011
- SHA256
  
  df4dfd0c2785d823d1979ee65a4acad375f33291f6b632b8a8c2f1ddab60c3cd
- SHA512
  
  aaed0dd1dc1fcb9e19c32df5a6b3861f798aafe7799510a437e548fc3a2d578fbb682cff9c74ccfb484735b17b4c40ad36891710ec3bc155b433954daf64f127
- SSDEEP
  
  6144:Piu1LWKLrJCWSFYQhj7JQsO8x1SO9IqdGWFco8isYPqUYkbVjGUJspW8lagxjI+q:PioC8JCW4pjg8x1SO7GaYk9GZptJxgB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2