571bae15b090ff2df35b59558e0922466da6af44ee93d97a64f666639ba57420 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfebbab6a0823f12b84ec46ef552e9f8_JaffaCakes118
Size

171KB
Sample

240825-dplteavemm
MD5

bfebbab6a0823f12b84ec46ef552e9f8
SHA1

7e6155c1482d5ee28305c32560e9e4be699341c6
SHA256

571bae15b090ff2df35b59558e0922466da6af44ee93d97a64f666639ba57420
SHA512

6ac2ea05813e83ce775cfb30cbaef005394437a9ca617fc2c38b6bcbb256362c797451a3c9ba3e308e0cc9463ec51bfe748c2125164c3c66cee98742b9cf9f9a
SSDEEP

3072:5Ces8yvHAhPzTzMmVNh6AGhF2ZCs8plA3wKysB+Y5RT0rY5FudDpJj:5CWTP3Ym7OAALsx03j

Score

5^/10

microsoft discovery phishing

Malware Config

Targets

- Target
  
  sample
- Size
  
  232KB
- MD5
  
  22a277f84ae2e38d2a58fedb3819b33c
- SHA1
  
  86132706d3e3c9103e16cf8607d6fe5dc9d200c8
- SHA256
  
  7304ce80d4bb2a3ae6f5dedde72d8335a36fafd6cc5e83fbf03d50c97c486d9d
- SHA512
  
  ade1860aaf80ea60ce723b4d5c20778cdc8b13e93c7abba044cf588a7f4ea3201abeb3a42a480a16b4b4a6d1e059c25bbec6fccbbfc272b270ec472082fc3358
- SSDEEP
  
  6144:gjaUzLu29+VgopUNqswBaxHRt6jwjzHNVJ9VWaGaLV:gjaUHu8+VgjvFDF5N
Score

5^/10

discovery microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftdiscoveryphishing