b1f56eae5f59080ac599ee000133e92f301ba778b2a0e78127976727b2328bb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc13681dfb3cdc176bd49f0b98fbe45d_JaffaCakes118
Size

385KB
Sample

240420-gnns6aah3z
MD5

fc13681dfb3cdc176bd49f0b98fbe45d
SHA1

1e2b84e78bf49d4e335091aba8fbb10f9510ef74
SHA256

b1f56eae5f59080ac599ee000133e92f301ba778b2a0e78127976727b2328bb8
SHA512

cb41761513d3733516d07449c060aac0f95b2f3e439948f4a18ef9b778ab973dcd710a3531f470a2297afe6e5ac65d8016cc853df39d1d596c90cef7eb231350
SSDEEP

12288:dgWMxbqConOz6IaFODCuW6Zx6mWU5QciN5tlWSa3HfB:d/MxbqbnOeI0MxZxdBa15vy/B

Score

7^/10

Malware Config

Targets

- Target
  
  fc13681dfb3cdc176bd49f0b98fbe45d_JaffaCakes118
- Size
  
  385KB
- MD5
  
  fc13681dfb3cdc176bd49f0b98fbe45d
- SHA1
  
  1e2b84e78bf49d4e335091aba8fbb10f9510ef74
- SHA256
  
  b1f56eae5f59080ac599ee000133e92f301ba778b2a0e78127976727b2328bb8
- SHA512
  
  cb41761513d3733516d07449c060aac0f95b2f3e439948f4a18ef9b778ab973dcd710a3531f470a2297afe6e5ac65d8016cc853df39d1d596c90cef7eb231350
- SSDEEP
  
  12288:dgWMxbqConOz6IaFODCuW6Zx6mWU5QciN5tlWSa3HfB:d/MxbqbnOeI0MxZxdBa15vy/B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2