neshta | 12cf577f28f1bddbc96b40de20be0f42faab16f2aecdfd9dcc6df79a9025689a | Triage

Sharing

General

Target

JaffaCakes118_ca3bc83026fe6cccc8c4b9b9e7c83e05
Size

395KB
Sample

250209-c33hmstqfq
MD5

ca3bc83026fe6cccc8c4b9b9e7c83e05
SHA1

e1b586d543fb5a75c013065c3be4f57c60847e5d
SHA256

12cf577f28f1bddbc96b40de20be0f42faab16f2aecdfd9dcc6df79a9025689a
SHA512

1e0e63fd33dafd30a581722b053b90ee51f50bc677690f2b0071f4028a42e2d3daf8c9b9b2621872877cf81d62b82113c78a963d539bc761386bc498b1a779ad
SSDEEP

3072:fLom2NoEjXIAphpXQoeOSlaA++reGLomxLomxLomVr85CZr85CZr85CZr85C:f0NvjYAzztUTTD9191919

Score

10^/10

neshta discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_ca3bc83026fe6cccc8c4b9b9e7c83e05
- Size
  
  395KB
- MD5
  
  ca3bc83026fe6cccc8c4b9b9e7c83e05
- SHA1
  
  e1b586d543fb5a75c013065c3be4f57c60847e5d
- SHA256
  
  12cf577f28f1bddbc96b40de20be0f42faab16f2aecdfd9dcc6df79a9025689a
- SHA512
  
  1e0e63fd33dafd30a581722b053b90ee51f50bc677690f2b0071f4028a42e2d3daf8c9b9b2621872877cf81d62b82113c78a963d539bc761386bc498b1a779ad
- SSDEEP
  
  3072:fLom2NoEjXIAphpXQoeOSlaA++reGLomxLomxLomVr85CZr85CZr85CZr85C:f0NvjYAzztUTTD9191919
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2