38f6c479bcd9706b542df0ca7f2e4180814790c11dc9d187e2776f6218bafd67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5443f77539e02139cdc7cd7b324e94d7_JaffaCakes118
Size

771KB
Sample

241017-3m2jhswdjk
MD5

5443f77539e02139cdc7cd7b324e94d7
SHA1

27c2143804edf840331bb99c209c04a736ee861b
SHA256

38f6c479bcd9706b542df0ca7f2e4180814790c11dc9d187e2776f6218bafd67
SHA512

0506ae081841c432f9e5d467532228168faa6f8e401153248aa4db96538cce96f70329b012943f1e2397c0dd5d7636e3d0459848035b522dde428642a50def67
SSDEEP

24576:K/C/7tPquOXZ8xXG0t9DRKb10hJaothZ2/T6FBBB:IIPYXmXRs/ofT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5443f77539e02139cdc7cd7b324e94d7_JaffaCakes118
- Size
  
  771KB
- MD5
  
  5443f77539e02139cdc7cd7b324e94d7
- SHA1
  
  27c2143804edf840331bb99c209c04a736ee861b
- SHA256
  
  38f6c479bcd9706b542df0ca7f2e4180814790c11dc9d187e2776f6218bafd67
- SHA512
  
  0506ae081841c432f9e5d467532228168faa6f8e401153248aa4db96538cce96f70329b012943f1e2397c0dd5d7636e3d0459848035b522dde428642a50def67
- SSDEEP
  
  24576:K/C/7tPquOXZ8xXG0t9DRKb10hJaothZ2/T6FBBB:IIPYXmXRs/ofT
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2