e61e4603c6e79bd715819ad617f286ee65c4ab771e4b71d2f8c4a638bc53782c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a896c9cfa9bc88f8a1c7fcfab6a25e3d_JaffaCakes118
Size

115KB
Sample

240818-23tm6szela
MD5

a896c9cfa9bc88f8a1c7fcfab6a25e3d
SHA1

e9157e41f987ed24fc2ca4b166e8fdc6b26dfe9b
SHA256

e61e4603c6e79bd715819ad617f286ee65c4ab771e4b71d2f8c4a638bc53782c
SHA512

df9d671e1c533ed68165141a1f9b09566a629f0ec7b306f54dc6b8560ebf75f56b4f3925079656493ff702e4aab2122fd2fce46615d00e65605cc3a9ad8c1ca8
SSDEEP

3072:LwUeOVnUFEckGZTMvFvAyBDON/+nGKr3P128/8y:l1YVklvFvDBDONaPA8/8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a896c9cfa9bc88f8a1c7fcfab6a25e3d_JaffaCakes118
- Size
  
  115KB
- MD5
  
  a896c9cfa9bc88f8a1c7fcfab6a25e3d
- SHA1
  
  e9157e41f987ed24fc2ca4b166e8fdc6b26dfe9b
- SHA256
  
  e61e4603c6e79bd715819ad617f286ee65c4ab771e4b71d2f8c4a638bc53782c
- SHA512
  
  df9d671e1c533ed68165141a1f9b09566a629f0ec7b306f54dc6b8560ebf75f56b4f3925079656493ff702e4aab2122fd2fce46615d00e65605cc3a9ad8c1ca8
- SSDEEP
  
  3072:LwUeOVnUFEckGZTMvFvAyBDON/+nGKr3P128/8y:l1YVklvFvDBDONaPA8/8
Score

7^/10

discovery
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2