gh0strat | bd24f77d3cb2f775b4ad6fc393cab3a8e509093fb9d1aa6295ae06f277c111df | Triage

Sharing

General

Target

JaffaCakes118_521c8abb6d25d7a957bc05b35b8c63d2
Size

148KB
Sample

250129-drs1hayrbx
MD5

521c8abb6d25d7a957bc05b35b8c63d2
SHA1

694a5acce4b6de68f0f0d71db8550b2950ba8e99
SHA256

bd24f77d3cb2f775b4ad6fc393cab3a8e509093fb9d1aa6295ae06f277c111df
SHA512

3ea60935129d759687da51feadd8c59cb7d4c82434ca386596e73fb250cdc687fc1f9c9eeea86eb9a1ba0fdd3ec477ebe288378b7a575cbf23e82670ad7c090d
SSDEEP

3072:HW9TjzH0suIXZyFEnDzUVeWnJLOD/PTBft82Iq+tsI4ns:HQTX/fXAFNDpOD/PTBl82Iq+tsq

Score

10^/10

gh0strat discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_521c8abb6d25d7a957bc05b35b8c63d2
- Size
  
  148KB
- MD5
  
  521c8abb6d25d7a957bc05b35b8c63d2
- SHA1
  
  694a5acce4b6de68f0f0d71db8550b2950ba8e99
- SHA256
  
  bd24f77d3cb2f775b4ad6fc393cab3a8e509093fb9d1aa6295ae06f277c111df
- SHA512
  
  3ea60935129d759687da51feadd8c59cb7d4c82434ca386596e73fb250cdc687fc1f9c9eeea86eb9a1ba0fdd3ec477ebe288378b7a575cbf23e82670ad7c090d
- SSDEEP
  
  3072:HW9TjzH0suIXZyFEnDzUVeWnJLOD/PTBft82Iq+tsI4ns:HQTX/fXAFNDpOD/PTBl82Iq+tsq
Score

5^/10

discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2