57995291e17c8f57b22aaecf3e5dc41588f88003b94f9f2ec385f6f8a92ca106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53057c1fe78439c213dbe684e9917653_JaffaCakes118
Size

385KB
Sample

241017-wwantsyand
MD5

53057c1fe78439c213dbe684e9917653
SHA1

d6dad11d0e0398187329362d4a8fb67d72543043
SHA256

57995291e17c8f57b22aaecf3e5dc41588f88003b94f9f2ec385f6f8a92ca106
SHA512

828242e02f747cc30e373f004f0dfcf6bcd9fa320ff407949e2c435fa2b73db2740e6977791841b37985bf218e588763b7d80e0c27188aa2f3892c293fdc770a
SSDEEP

6144:iwAXMFZwe3gPGqX0vGdvMe1wM1msPthN9DOmfOoxnzy9t/r4ohawB:iwAcfwPGFQvMeJ/DDNxzy9t/rtIwB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  53057c1fe78439c213dbe684e9917653_JaffaCakes118
- Size
  
  385KB
- MD5
  
  53057c1fe78439c213dbe684e9917653
- SHA1
  
  d6dad11d0e0398187329362d4a8fb67d72543043
- SHA256
  
  57995291e17c8f57b22aaecf3e5dc41588f88003b94f9f2ec385f6f8a92ca106
- SHA512
  
  828242e02f747cc30e373f004f0dfcf6bcd9fa320ff407949e2c435fa2b73db2740e6977791841b37985bf218e588763b7d80e0c27188aa2f3892c293fdc770a
- SSDEEP
  
  6144:iwAXMFZwe3gPGqX0vGdvMe1wM1msPthN9DOmfOoxnzy9t/r4ohawB:iwAcfwPGFQvMeJ/DDNxzy9t/rtIwB
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2