34265fe3896a2ef893cd43fe2f0e61d0ca3eb37300c41e595b544c8366dc08d0 | Triage

Sharing

General

Target

f9894c79f59f2af29e7209ce063fe32b_JaffaCakes118
Size

385KB
Sample

240419-fdk4vahb88
MD5

f9894c79f59f2af29e7209ce063fe32b
SHA1

c57fa735d6df57a20801d319f6aaa87f6dcc4f33
SHA256

34265fe3896a2ef893cd43fe2f0e61d0ca3eb37300c41e595b544c8366dc08d0
SHA512

3c6a96ebf4607bdd25505ffaf4c3c08f0ef6074fa116e9bdc89429d1b46691c2f9177726912f760bb25b2b4f70df733578de729b767f0abf4fe86aa580ee9904
SSDEEP

6144:kDDJ27iXWnFYTadxiEQZVcPRjbDE+Pa6YaZAATsZwvVTq6CbroFXgyx91B:kDCfF7dxTxDEOa6gmVG6C3IXT1B

Score

7^/10

Malware Config

Targets

- Target
  
  f9894c79f59f2af29e7209ce063fe32b_JaffaCakes118
- Size
  
  385KB
- MD5
  
  f9894c79f59f2af29e7209ce063fe32b
- SHA1
  
  c57fa735d6df57a20801d319f6aaa87f6dcc4f33
- SHA256
  
  34265fe3896a2ef893cd43fe2f0e61d0ca3eb37300c41e595b544c8366dc08d0
- SHA512
  
  3c6a96ebf4607bdd25505ffaf4c3c08f0ef6074fa116e9bdc89429d1b46691c2f9177726912f760bb25b2b4f70df733578de729b767f0abf4fe86aa580ee9904
- SSDEEP
  
  6144:kDDJ27iXWnFYTadxiEQZVcPRjbDE+Pa6YaZAATsZwvVTq6CbroFXgyx91B:kDCfF7dxTxDEOa6gmVG6C3IXT1B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2