13cc677b6318a265a486ddb00b0bf31b4946eabe3f9a8a84812dae61e2800dce | Triage

Sharing

General

Target

692d4de422cbc56a4dce21da675b16fe_JaffaCakes118
Size

416KB
Sample

240523-a162yafc62
MD5

692d4de422cbc56a4dce21da675b16fe
SHA1

ed984a01f12753bde5876f40f154919cd67b2c17
SHA256

13cc677b6318a265a486ddb00b0bf31b4946eabe3f9a8a84812dae61e2800dce
SHA512

4d04333b6e639267d5eaa5f95fdd148fdad663f757d074ae2d7728f6837ae57a5db5d87da4962c244013b7f17f544612287f831d88fe88748d8f980092dfcaa0
SSDEEP

12288:pQiGQjL8+iD99109Xp0+MBTlPadSfXioRcpMXVJoY:pQitn8U9MBTlP0QjcpMXVJoY

Score

7^/10

execution

Malware Config

Targets

- Target
  
  692d4de422cbc56a4dce21da675b16fe_JaffaCakes118
- Size
  
  416KB
- MD5
  
  692d4de422cbc56a4dce21da675b16fe
- SHA1
  
  ed984a01f12753bde5876f40f154919cd67b2c17
- SHA256
  
  13cc677b6318a265a486ddb00b0bf31b4946eabe3f9a8a84812dae61e2800dce
- SHA512
  
  4d04333b6e639267d5eaa5f95fdd148fdad663f757d074ae2d7728f6837ae57a5db5d87da4962c244013b7f17f544612287f831d88fe88748d8f980092dfcaa0
- SSDEEP
  
  12288:pQiGQjL8+iD99109Xp0+MBTlPadSfXioRcpMXVJoY:pQitn8U9MBTlP0QjcpMXVJoY
Score

7^/10

execution
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2