112514af10d7ceb37004ec05b1b64f14c8438137243b49ab63e33627b3bedcca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff89551f8c04e4bea56c9bfb44647b5b_JaffaCakes118
Size

385KB
Sample

240421-sahwjaeb41
MD5

ff89551f8c04e4bea56c9bfb44647b5b
SHA1

a9b3942785793c96c3efc1ef317b4a7e06da99a6
SHA256

112514af10d7ceb37004ec05b1b64f14c8438137243b49ab63e33627b3bedcca
SHA512

bda00ca981c9484a6a4aef5fbfd7b6d297753e236e995f7ded7e14a5d12fbaa129cf1965f44d1545e47fd4bcc6e9474bd4a50741fd3dcb92feb1339bc248c4ac
SSDEEP

6144:RBZal8032qwiH3Lcj95pf8/3cczn0bqrCxkdT1XYy57oRVKjcB:RBE8GJZln0bqr9pYc7oRVBB

Score

7^/10

Malware Config

Targets

- Target
  
  ff89551f8c04e4bea56c9bfb44647b5b_JaffaCakes118
- Size
  
  385KB
- MD5
  
  ff89551f8c04e4bea56c9bfb44647b5b
- SHA1
  
  a9b3942785793c96c3efc1ef317b4a7e06da99a6
- SHA256
  
  112514af10d7ceb37004ec05b1b64f14c8438137243b49ab63e33627b3bedcca
- SHA512
  
  bda00ca981c9484a6a4aef5fbfd7b6d297753e236e995f7ded7e14a5d12fbaa129cf1965f44d1545e47fd4bcc6e9474bd4a50741fd3dcb92feb1339bc248c4ac
- SSDEEP
  
  6144:RBZal8032qwiH3Lcj95pf8/3cczn0bqrCxkdT1XYy57oRVKjcB:RBE8GJZln0bqr9pYc7oRVBB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2