8a7ecac77c6ab1eb3aa8cbc8309f454fa4f67ffe0fdfd2f6ba0a50a54c6d2c4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c87e83d35eb40f39fc536cc3703101b5_JaffaCakes118
Size

1.9MB
Sample

240829-kjld1svbjj
MD5

c87e83d35eb40f39fc536cc3703101b5
SHA1

8b4ff785865703a0e363c6b38dbdec9c2d22e609
SHA256

8a7ecac77c6ab1eb3aa8cbc8309f454fa4f67ffe0fdfd2f6ba0a50a54c6d2c4c
SHA512

d67e4688bdffe136a3bb1ef1010bd66432f2e99d540bdfc4e318197a2043b76afc8bc5ad020b8c76fc5ef1f9ca6a117600d5deab35e026dbdc7cc7eaee42950a
SSDEEP

49152:Qoa1taC070d3Qcam3t3u+ekX9yh+yIXFr0bHy:Qoa1taC08R3ZuQ9yh4Vozy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c87e83d35eb40f39fc536cc3703101b5_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  c87e83d35eb40f39fc536cc3703101b5
- SHA1
  
  8b4ff785865703a0e363c6b38dbdec9c2d22e609
- SHA256
  
  8a7ecac77c6ab1eb3aa8cbc8309f454fa4f67ffe0fdfd2f6ba0a50a54c6d2c4c
- SHA512
  
  d67e4688bdffe136a3bb1ef1010bd66432f2e99d540bdfc4e318197a2043b76afc8bc5ad020b8c76fc5ef1f9ca6a117600d5deab35e026dbdc7cc7eaee42950a
- SSDEEP
  
  49152:Qoa1taC070d3Qcam3t3u+ekX9yh+yIXFr0bHy:Qoa1taC08R3ZuQ9yh4Vozy
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2