ca12ed9283b54d249ecbed3983464001feba996f4500c71ca3676d1a2ffd43dc | Triage

Sharing

General

Target

0dcea8a219587af66b0c4cfb22bb7067_JaffaCakes118
Size

35KB
Sample

241003-ejtgqstcmn
MD5

0dcea8a219587af66b0c4cfb22bb7067
SHA1

1beeb5305b92d67bacf045baff664bec18e69dd6
SHA256

ca12ed9283b54d249ecbed3983464001feba996f4500c71ca3676d1a2ffd43dc
SHA512

25a6631bbde029725d3cc37fc01e793ded5565450f5e4935c27e790485b1dd6ca0defa9f73d03f45f4d179489068cfe8044b04de4509c07d994673f74b8260f1
SSDEEP

768:9H+ePihQ7WcdcXa2jFIbbKvS0TxRGAquV/GmyfIIa1de:9H+u9zdcXa2jEeZjEAn

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  0dcea8a219587af66b0c4cfb22bb7067_JaffaCakes118
- Size
  
  35KB
- MD5
  
  0dcea8a219587af66b0c4cfb22bb7067
- SHA1
  
  1beeb5305b92d67bacf045baff664bec18e69dd6
- SHA256
  
  ca12ed9283b54d249ecbed3983464001feba996f4500c71ca3676d1a2ffd43dc
- SHA512
  
  25a6631bbde029725d3cc37fc01e793ded5565450f5e4935c27e790485b1dd6ca0defa9f73d03f45f4d179489068cfe8044b04de4509c07d994673f74b8260f1
- SSDEEP
  
  768:9H+ePihQ7WcdcXa2jFIbbKvS0TxRGAquV/GmyfIIa1de:9H+u9zdcXa2jEeZjEAn
Score

7^/10

defense_evasion discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery