2fb96f9a3c95ffdbfad75717afb61e80ef13ab4acf07b9bac3113ec7f48c5391 | Triage

Sharing

General

Target

93a611a864b24b1a8d9c88eb5a49e7cf_JaffaCakes118
Size

1.6MB
Sample

240813-ssnjqswcjn
MD5

93a611a864b24b1a8d9c88eb5a49e7cf
SHA1

e58dfb2d2c0e0b58f141efc7fc1c6db5505cdfeb
SHA256

2fb96f9a3c95ffdbfad75717afb61e80ef13ab4acf07b9bac3113ec7f48c5391
SHA512

e7dfc208bd7746b7d3944d81afbb7797c8966032c320107c43197b94ae8959ce8843ec9d9a129cac2326c5c5a544821e4227219a3a2765882b3e5617c0222f34
SSDEEP

24576:4ZO5kqXhrmIc7KIa1eQmDbbWdF1yJiyZVLgnPH4XVhzKtKEsXR:4PqX8IHIEeQguXYPVL1X7KtKEsB

Score

8^/10

discovery evasion

Malware Config

Targets

- Target
  
  93a611a864b24b1a8d9c88eb5a49e7cf_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  93a611a864b24b1a8d9c88eb5a49e7cf
- SHA1
  
  e58dfb2d2c0e0b58f141efc7fc1c6db5505cdfeb
- SHA256
  
  2fb96f9a3c95ffdbfad75717afb61e80ef13ab4acf07b9bac3113ec7f48c5391
- SHA512
  
  e7dfc208bd7746b7d3944d81afbb7797c8966032c320107c43197b94ae8959ce8843ec9d9a129cac2326c5c5a544821e4227219a3a2765882b3e5617c0222f34
- SSDEEP
  
  24576:4ZO5kqXhrmIc7KIa1eQmDbbWdF1yJiyZVLgnPH4XVhzKtKEsXR:4PqX8IHIEeQguXYPVL1X7KtKEsB
Score

8^/10

discovery evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2