9afc51e8f87eeba8a2e9f79dad1760439920bca34b7c350e393e20b0c5f2ea44 | Triage

Sharing

General

Target

fbfeffc8bb179aa5fc25ebb6aa325e09_JaffaCakes118
Size

1000KB
Sample

240420-fsq9eahc76
MD5

fbfeffc8bb179aa5fc25ebb6aa325e09
SHA1

1e0f603ad7633bad06c30e47ee0e28ecd133dd2c
SHA256

9afc51e8f87eeba8a2e9f79dad1760439920bca34b7c350e393e20b0c5f2ea44
SHA512

7a26eafbdf572b6860a34c51846a23aec762bf2645a68d8c8e2594aef4078d6f76f7f72ed281424f8a31b053577066c3cbbde94fc89c6c1f09dc5c5e8e56d0a8
SSDEEP

24576:4Pnw0s36lSY1yuYqSNh4kuD8W1B+5vMiqt0gj2ed:4Pds36Qy5KVugUqOL

Score

7^/10

Malware Config

Targets

- Target
  
  fbfeffc8bb179aa5fc25ebb6aa325e09_JaffaCakes118
- Size
  
  1000KB
- MD5
  
  fbfeffc8bb179aa5fc25ebb6aa325e09
- SHA1
  
  1e0f603ad7633bad06c30e47ee0e28ecd133dd2c
- SHA256
  
  9afc51e8f87eeba8a2e9f79dad1760439920bca34b7c350e393e20b0c5f2ea44
- SHA512
  
  7a26eafbdf572b6860a34c51846a23aec762bf2645a68d8c8e2594aef4078d6f76f7f72ed281424f8a31b053577066c3cbbde94fc89c6c1f09dc5c5e8e56d0a8
- SSDEEP
  
  24576:4Pnw0s36lSY1yuYqSNh4kuD8W1B+5vMiqt0gj2ed:4Pds36Qy5KVugUqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2