6f01fdc45dd5cfa5fcc02cf8e9f819979a7653f0e0704aa6dfb90e58f17b0a22 | Triage

Sharing

General

Target

d6c6359592a83e5da9946e1ab11476ee_JaffaCakes118
Size

135KB
Sample

240909-vtm1pszemr
MD5

d6c6359592a83e5da9946e1ab11476ee
SHA1

b6a8e9f610e235754c5372476fc178b52423fe3c
SHA256

6f01fdc45dd5cfa5fcc02cf8e9f819979a7653f0e0704aa6dfb90e58f17b0a22
SHA512

c56ab5df22338de2380a5f6aa29d4db7fbca29ea6bd6cb16059acfcae11d979a8b2e024bacd426f00a11a79a0cf7add6441240d1a611958023aa06efe1855ca8
SSDEEP

3072:e97HgvA7LsCiud4wqApzWh6rfEqeMy9Iout:27Hgv2IfuN7pjE79IoS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d6c6359592a83e5da9946e1ab11476ee_JaffaCakes118
- Size
  
  135KB
- MD5
  
  d6c6359592a83e5da9946e1ab11476ee
- SHA1
  
  b6a8e9f610e235754c5372476fc178b52423fe3c
- SHA256
  
  6f01fdc45dd5cfa5fcc02cf8e9f819979a7653f0e0704aa6dfb90e58f17b0a22
- SHA512
  
  c56ab5df22338de2380a5f6aa29d4db7fbca29ea6bd6cb16059acfcae11d979a8b2e024bacd426f00a11a79a0cf7add6441240d1a611958023aa06efe1855ca8
- SSDEEP
  
  3072:e97HgvA7LsCiud4wqApzWh6rfEqeMy9Iout:27Hgv2IfuN7pjE79IoS
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2