3329518881f41a5fa3faf134d146a71026dd4b677368228bbbea7379c71717f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55c71224bdad597061a3b132ed29f18_JaffaCakes118
Size

15.5MB
Sample

240909-apqwkssfpp
MD5

d55c71224bdad597061a3b132ed29f18
SHA1

c0020443bd65bc3dd37f241a5b25de469b7ed2a1
SHA256

3329518881f41a5fa3faf134d146a71026dd4b677368228bbbea7379c71717f2
SHA512

c92388a603166427332b4a693d439f6728dc8cc8d26ddbb494b7ef8e1abfa45c82cffaab718abf2b851ffc292fbff069f9e9c0e76516e07c9853a43753d086eb
SSDEEP

393216:rlC9sfZ2N9c5hlERblh2p/POS7ZLmULsDKSZ81NmT:resfZwEhk5Qp/WmZLmUwDp8jmT

Score

7^/10

pyinstaller

Malware Config

Targets

- Target
  
  d55c71224bdad597061a3b132ed29f18_JaffaCakes118
- Size
  
  15.5MB
- MD5
  
  d55c71224bdad597061a3b132ed29f18
- SHA1
  
  c0020443bd65bc3dd37f241a5b25de469b7ed2a1
- SHA256
  
  3329518881f41a5fa3faf134d146a71026dd4b677368228bbbea7379c71717f2
- SHA512
  
  c92388a603166427332b4a693d439f6728dc8cc8d26ddbb494b7ef8e1abfa45c82cffaab718abf2b851ffc292fbff069f9e9c0e76516e07c9853a43753d086eb
- SSDEEP
  
  393216:rlC9sfZ2N9c5hlERblh2p/POS7ZLmULsDKSZ81NmT:resfZwEhk5Qp/WmZLmUwDp8jmT
Score

7^/10
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2