f5220a8e0b332703221477c4f5218dcdf66b42cc53f6540edec253068dd7f8d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0421a1c99c07a8196800de894e7f29d5_JaffaCakes118
Size

743KB
Sample

241001-dhpxgs1glf
MD5

0421a1c99c07a8196800de894e7f29d5
SHA1

4a1bb9c68a115946bf1e3e0622a9ebadd5e5842e
SHA256

f5220a8e0b332703221477c4f5218dcdf66b42cc53f6540edec253068dd7f8d9
SHA512

1e30e6e7164d3ee5b9f29666dbc01f0f51dafbfcf859772091c6288500b0f745efb5a69929ece035f73d79ebd9239a2a2e3d55d4d16ca586763bb969e41e2286
SSDEEP

12288:URyTS9tU4g/n/t0EW5A0zyYvJwQ5oAlK+GERv5bIk6bQQ52LgRg08y5HSn7zY:YSsU4gf2EW5A2DJr/kSRvNIk6v3av

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0421a1c99c07a8196800de894e7f29d5_JaffaCakes118
- Size
  
  743KB
- MD5
  
  0421a1c99c07a8196800de894e7f29d5
- SHA1
  
  4a1bb9c68a115946bf1e3e0622a9ebadd5e5842e
- SHA256
  
  f5220a8e0b332703221477c4f5218dcdf66b42cc53f6540edec253068dd7f8d9
- SHA512
  
  1e30e6e7164d3ee5b9f29666dbc01f0f51dafbfcf859772091c6288500b0f745efb5a69929ece035f73d79ebd9239a2a2e3d55d4d16ca586763bb969e41e2286
- SSDEEP
  
  12288:URyTS9tU4g/n/t0EW5A0zyYvJwQ5oAlK+GERv5bIk6bQQ52LgRg08y5HSn7zY:YSsU4gf2EW5A2DJr/kSRvNIk6v3av
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2