392dcf95c7af47c9b917cde29f8f6e9b77d1f6887d9dbc3558c5a26e04d9308e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3cb322c2a0c76932e6d88e48c9f2301_JaffaCakes118
Size

191KB
Sample

240817-xy9flsvdpn
MD5

a3cb322c2a0c76932e6d88e48c9f2301
SHA1

ab033c19a320809637f146181b7a4e783adaf374
SHA256

392dcf95c7af47c9b917cde29f8f6e9b77d1f6887d9dbc3558c5a26e04d9308e
SHA512

c1055988d0966d3b8da7b7f96c3bd46d0312f8263c49f76f4f6279c14f3698bf93b3c2b3622512a695779de84b4dfce362890d3f083ba31b94ec514844689897
SSDEEP

3072:Q9L5L5Mx5cAPQFM4+yiP0iXqqp9A4oeOaojsINMm4Wp7KiTnp/ObHgmQ2sn:2LvMTXc2yUp9AOEsIuhWp7FTnp/sHgxH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a3cb322c2a0c76932e6d88e48c9f2301_JaffaCakes118
- Size
  
  191KB
- MD5
  
  a3cb322c2a0c76932e6d88e48c9f2301
- SHA1
  
  ab033c19a320809637f146181b7a4e783adaf374
- SHA256
  
  392dcf95c7af47c9b917cde29f8f6e9b77d1f6887d9dbc3558c5a26e04d9308e
- SHA512
  
  c1055988d0966d3b8da7b7f96c3bd46d0312f8263c49f76f4f6279c14f3698bf93b3c2b3622512a695779de84b4dfce362890d3f083ba31b94ec514844689897
- SSDEEP
  
  3072:Q9L5L5Mx5cAPQFM4+yiP0iXqqp9A4oeOaojsINMm4Wp7KiTnp/ObHgmQ2sn:2LvMTXc2yUp9AOEsIuhWp7FTnp/sHgxH
Score

7^/10

discovery
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2