894bf0cf60b41e6ed9b280c025858e05902487cf3f5fdd3c9b493dc970b5e420 | Triage

Sharing

General

Target

639b3710d9fae3aa8074d674e404af78_JaffaCakes118
Size

30KB
Sample

240521-rrdgpshb4z
MD5

639b3710d9fae3aa8074d674e404af78
SHA1

df530f378ecde2fca04462c789d4c606319e157f
SHA256

894bf0cf60b41e6ed9b280c025858e05902487cf3f5fdd3c9b493dc970b5e420
SHA512

04716193a73eb3d0ab37e7b061bb14c11c6084cd596370d3e9616d8f9edbefd1054c6b5ce366e27dcd58e4c2a8c0489af43692909575292172bdcf063f8bdb44
SSDEEP

384:SbHAoGzygTeyUtTmF3i2hV+5cdNGUvMt/FHnu6xKZyRtcfx3yn:SbizyIeyUUO5AB56x4yn

Score

6^/10

Malware Config

Targets

- Target
  
  639b3710d9fae3aa8074d674e404af78_JaffaCakes118
- Size
  
  30KB
- MD5
  
  639b3710d9fae3aa8074d674e404af78
- SHA1
  
  df530f378ecde2fca04462c789d4c606319e157f
- SHA256
  
  894bf0cf60b41e6ed9b280c025858e05902487cf3f5fdd3c9b493dc970b5e420
- SHA512
  
  04716193a73eb3d0ab37e7b061bb14c11c6084cd596370d3e9616d8f9edbefd1054c6b5ce366e27dcd58e4c2a8c0489af43692909575292172bdcf063f8bdb44
- SSDEEP
  
  384:SbHAoGzygTeyUtTmF3i2hV+5cdNGUvMt/FHnu6xKZyRtcfx3yn:SbizyIeyUUO5AB56x4yn
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2