71d1b4d736ca56b2149cca8423d2c73a7a5a64aa10ac0f382522816c905be3df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ddbf2147008eb2ef7a9a6c1ccf16d8_JaffaCakes118
Size

1.9MB
Sample

241008-25152a1crb
MD5

26ddbf2147008eb2ef7a9a6c1ccf16d8
SHA1

ac3e1c01a55791f27f9fa2554a64622d3c8f9b2b
SHA256

71d1b4d736ca56b2149cca8423d2c73a7a5a64aa10ac0f382522816c905be3df
SHA512

d8070029372ec54554c84ef0a0b3dd8abaa0b9c6b3de424d889b4da72949713927f18252c203343c436af8de6484d2aceb8370dc183f061a605dbeabca13db4f
SSDEEP

49152:Qoa1taC070djOgduEb5u9qmP4gBPd/hA7Jb:Qoa1taC0IOvEbM9qmP/VGVb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  26ddbf2147008eb2ef7a9a6c1ccf16d8_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  26ddbf2147008eb2ef7a9a6c1ccf16d8
- SHA1
  
  ac3e1c01a55791f27f9fa2554a64622d3c8f9b2b
- SHA256
  
  71d1b4d736ca56b2149cca8423d2c73a7a5a64aa10ac0f382522816c905be3df
- SHA512
  
  d8070029372ec54554c84ef0a0b3dd8abaa0b9c6b3de424d889b4da72949713927f18252c203343c436af8de6484d2aceb8370dc183f061a605dbeabca13db4f
- SSDEEP
  
  49152:Qoa1taC070djOgduEb5u9qmP4gBPd/hA7Jb:Qoa1taC0IOvEbM9qmP/VGVb
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2