0e8aebca7070d9ba9c3d305682cb0dd496d23d06ff2e8fba4cb1c9400bb7d567 | Triage

Sharing

General

Target

da48b0ba28e4af65809f74196268f76e_JaffaCakes118
Size

152KB
Sample

240911-nyvg1sygph
MD5

da48b0ba28e4af65809f74196268f76e
SHA1

b13b1714c3658a29d504f2cef68db56a229db83e
SHA256

0e8aebca7070d9ba9c3d305682cb0dd496d23d06ff2e8fba4cb1c9400bb7d567
SHA512

76ce040443dbb469924d8bb823eecdfcecd27de705b55dee78caa170f56e0fd8a84d5d9ba29c7056d62bfacf6da5684c3200016684c766f6f478756e1f8242cd
SSDEEP

3072:9hQGtLpoVwL6GyHSqREdFgxm2FCM5i0ikSsi9GbYuY:ZJE66GBqREfL8bb9Ssik8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  da48b0ba28e4af65809f74196268f76e_JaffaCakes118
- Size
  
  152KB
- MD5
  
  da48b0ba28e4af65809f74196268f76e
- SHA1
  
  b13b1714c3658a29d504f2cef68db56a229db83e
- SHA256
  
  0e8aebca7070d9ba9c3d305682cb0dd496d23d06ff2e8fba4cb1c9400bb7d567
- SHA512
  
  76ce040443dbb469924d8bb823eecdfcecd27de705b55dee78caa170f56e0fd8a84d5d9ba29c7056d62bfacf6da5684c3200016684c766f6f478756e1f8242cd
- SSDEEP
  
  3072:9hQGtLpoVwL6GyHSqREdFgxm2FCM5i0ikSsi9GbYuY:ZJE66GBqREfL8bb9Ssik8
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2