2f0298d75785b9c6e3643aa6b4d878d0f531e05004139ec42ed6efc0d09b7c87 | Triage

Sharing

General

Target

eaae2d4853852e946d9faaeac2d78788_JaffaCakes118
Size

53KB
Sample

240919-f9legstcnl
MD5

eaae2d4853852e946d9faaeac2d78788
SHA1

cbe7d38f534da11211a63c21e73d4d0f224b6f6d
SHA256

2f0298d75785b9c6e3643aa6b4d878d0f531e05004139ec42ed6efc0d09b7c87
SHA512

1e076d7c9da25bef849f47ed50eb4fdd61ca7585856f1d06125e7adf5eaa8bcad13546dff88e83403b5762b0412772044a3bc393250045ee1c730b25dc8dd43e
SSDEEP

1536:Lyg4fAoNMy0TCpkg0m4qfeKlIHMPvWs2DiHi:Wg4pNP00k5PfMIsPffi

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  eaae2d4853852e946d9faaeac2d78788_JaffaCakes118
- Size
  
  53KB
- MD5
  
  eaae2d4853852e946d9faaeac2d78788
- SHA1
  
  cbe7d38f534da11211a63c21e73d4d0f224b6f6d
- SHA256
  
  2f0298d75785b9c6e3643aa6b4d878d0f531e05004139ec42ed6efc0d09b7c87
- SHA512
  
  1e076d7c9da25bef849f47ed50eb4fdd61ca7585856f1d06125e7adf5eaa8bcad13546dff88e83403b5762b0412772044a3bc393250045ee1c730b25dc8dd43e
- SSDEEP
  
  1536:Lyg4fAoNMy0TCpkg0m4qfeKlIHMPvWs2DiHi:Wg4pNP00k5PfMIsPffi
Score

8^/10

discovery
- Blocklisted process makes network request
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2