01fd7e90a211faf6e41e14093946d7b28d6c6de504fce3b9f9edb1da65236814 | Triage

Sharing

General

Target

b2d46e4880a6b88718761a71300bc5fe_JaffaCakes118
Size

10KB
Sample

240821-kst3hszbmf
MD5

b2d46e4880a6b88718761a71300bc5fe
SHA1

b9e9cac5b7f6e780a1cf400c7477eb4709d72d2f
SHA256

01fd7e90a211faf6e41e14093946d7b28d6c6de504fce3b9f9edb1da65236814
SHA512

ccd8ee3450b7c267c3a30fb94dced7a15a4448edfbc87123ca7f671709b66ab9818860428787873b4ec31bc5cf57019930c9f956fb6dbf1875e0844a36acfa80
SSDEEP

192:NmubZkHAef4oh3R0tydj8DH0rPUkbKEatb5Fap:NLC7f4oOtyxmUrPPbK7b5FY

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  b2d46e4880a6b88718761a71300bc5fe_JaffaCakes118
- Size
  
  10KB
- MD5
  
  b2d46e4880a6b88718761a71300bc5fe
- SHA1
  
  b9e9cac5b7f6e780a1cf400c7477eb4709d72d2f
- SHA256
  
  01fd7e90a211faf6e41e14093946d7b28d6c6de504fce3b9f9edb1da65236814
- SHA512
  
  ccd8ee3450b7c267c3a30fb94dced7a15a4448edfbc87123ca7f671709b66ab9818860428787873b4ec31bc5cf57019930c9f956fb6dbf1875e0844a36acfa80
- SSDEEP
  
  192:NmubZkHAef4oh3R0tydj8DH0rPUkbKEatb5Fap:NLC7f4oOtyxmUrPPbK7b5FY
Score

7^/10

defense_evasion discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery