92f2a6c23bb721e20bd7d2e8530ccd634dce555e05b1438950013a7c5f8b5dba | Triage

Sharing

General

Target

a7a6d16ebf2988b7c8fe699be3331f8d_JaffaCakes118
Size

485KB
Sample

240818-wlzvzawfkc
MD5

a7a6d16ebf2988b7c8fe699be3331f8d
SHA1

63d9abc02a8837f696122affa69b4c46f7b10c7b
SHA256

92f2a6c23bb721e20bd7d2e8530ccd634dce555e05b1438950013a7c5f8b5dba
SHA512

ffa7a5a7ab4ef00760478a56b63330381376d1de7e21828666bda33248e07e7b8212ed298596c9f7c78396c6b649225b6f5181fd2bc6668dae3c93dabb65bb27
SSDEEP

12288:M0RpIXY4LQGotSeq8yVmnGjo1yV4LTAgrgK+LQ9:M0RpII4zeq8yVoDkC37+m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Achates.html
- Size
  
  2KB
- MD5
  
  0144e03a3d903eab1ba94cd7235f2ef6
- SHA1
  
  f0c6ce892ae36619329bd843c147c06cf2038a96
- SHA256
  
  bbb57cdfa998f1ffc19329a4c7b50d4070b4e1a4b233b3a049085473c8a8bcfd
- SHA512
  
  cec62af617ca3b9c596d33959fcc66f1fc74988d19a7164a0d835d3d53bf221e9d99beb568bfdf904251d88ae55fdf1db28b74e561ca0d9a86740d703ee54112
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  netadmininstall.EXE
- Size
  
  488KB
- MD5
  
  3ff76571d7f87339bca04c6071ba9dcd
- SHA1
  
  ece7e27b2bc6598b78a901a3b3a8b89da14d1587
- SHA256
  
  6d49d30b3ec28b49dbb872be83ff4731bf3ed1699fee72e8c454ac84144bd106
- SHA512
  
  2bfc09339f47ae7a0c43f8969b49f095acbdb1a3e783cb359ff0f1d3d9e0430837cf4413f3768d757df99d7294d934f434b55d58fe4d922aeba7e20071e2d797
- SSDEEP
  
  12288:OFn4424Z5jxQeq62tzFaSCMiPtcNyJsLTAgxgi+pQavYk:OFPLpQeq6iF5C9sJ3H+fb
Score

7^/10

discovery
- Loads dropped DLL
- Drops file in System32 directory
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4