072573d5a32a8c773e47793a2f0348d73f08ad65b480e3023c903001abd6d3ac | Triage

Sharing

General

Target

db5325567337f9ae434a6d70f2e5fa5b_JaffaCakes118
Size

189KB
Sample

240911-2avd1awgqc
MD5

db5325567337f9ae434a6d70f2e5fa5b
SHA1

d4f473101a82462243819708222da02fa86c6a6b
SHA256

072573d5a32a8c773e47793a2f0348d73f08ad65b480e3023c903001abd6d3ac
SHA512

0f0bf6b5d78b6548cf94739e323354b1825bccb42eaae5779a184e0aaace835a30b7c4cb5f8c42fa085fedbf138f77f73881e54188398d7021806accc2dff263
SSDEEP

3072:iZxX4w9lFR929SUMLLjRCAmWP+Uv+5hxaislfbs2Kv++dyA4rHLlZx18RfRNeie7:iZxoqlL929SUqNCNu+osh0iI/KvMZxUi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Sworda.exe
- Size
  
  219KB
- MD5
  
  bcf6a2641a6cce6b590c8f8c401361c1
- SHA1
  
  26e0470792d26b100ad51bc3ba1eff0538ec1f39
- SHA256
  
  d97657a88609ddf77c5fd1b21ace96ab086ca4c1d68074dd837ec310071d02b9
- SHA512
  
  fd1e25e95f3efe6e23476e92cda9019080c09732e2ead803c3b938de380df652b6603adb978dfeedffdc60fad427626b9e05de11ce5f0edadd65f797806749c2
- SSDEEP
  
  6144:qPS46wHhuYoBu+oshaiI/Kv+Zx+NelROCUKA:qPSyBuY5ohC/fZx+NeDC9
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2