7bd000df2bf9b233836e7b718c967a6477adfb27bf2edb95313b6a30df191971 | Triage

Sharing

General

Target

17382afaf55e49e7f273f372e7f53f33_JaffaCakes118
Size

327KB
Sample

240505-mc1lgafb2s
MD5

17382afaf55e49e7f273f372e7f53f33
SHA1

159e9f9b7febc0b344c5038dbff7bc0f56415763
SHA256

7bd000df2bf9b233836e7b718c967a6477adfb27bf2edb95313b6a30df191971
SHA512

e4aa678ed3d7389e9f75b085b972d2a76283ea6d17c7a24575dcdd79a57eb6fcf0c001381acc92610c7a5111f63dd1c6259a06f458e11af2ee6cdc8c36817f6d
SSDEEP

6144:hS67ab3UUmmaVRJrkXw6jPeBYZLp2tGdEcAPf0jpQg/Kpar5h9SnV2WnxmEz/ART:hS8RUmJ1rkxFVE3lqKgEcWPMl

Score

7^/10

Malware Config

Targets

- Target
  
  Black Project free/Black Project free.exe
- Size
  
  134KB
- MD5
  
  90485b80afeb10e4b7c0cdaa9debe03e
- SHA1
  
  d973b65b1634b5f964792bfc0d61cbcdcbd46f5c
- SHA256
  
  f3f455267b6436ecab5c82d4b7ad2fe09c7600cd447eb17bd3f2fafba7a755ae
- SHA512
  
  90c2b6134a0c5ef202f0ad2d3409975d0a75d0144752e4a0ca11baafc714b7b77f120bfacef901535940281ae282634564947ccd05df446343e68bf618e92597
- SSDEEP
  
  3072:g8B9qTvDWIGoJriZqVvum5R5m2AQ0m6mFijaVN:g5TrWIrZiium5R1A9Zm
Score

7^/10
- Drops startup file
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2