8e2a36792f3bd6d0c6471f907721a48c42a7032926efc842ac1d9662b00582e8 | Triage

Sharing

General

Target

JaffaCakes118_00bb33f6b164ae16439b57e5407c2d58
Size

199KB
Sample

250218-twj66avmy9
MD5

00bb33f6b164ae16439b57e5407c2d58
SHA1

5e5ab549929efc7095214540a50e93150281f047
SHA256

8e2a36792f3bd6d0c6471f907721a48c42a7032926efc842ac1d9662b00582e8
SHA512

ab3749602129ffc5388e211ee7fbc07bf65ccd5feca7a42fbbf584e8fd6af3d2db2d9eefdc84cd43a434b2239c97ee14f457d44501bd2852ef8fc1d90b3e04f8
SSDEEP

3072:VSnpywl9Nv3c49nSMhMwM0uusFxynNRCqhVgf5MtuxGQ:Voywl9No/2Ovb

Score

10^/10

google discovery phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_00bb33f6b164ae16439b57e5407c2d58
- Size
  
  199KB
- MD5
  
  00bb33f6b164ae16439b57e5407c2d58
- SHA1
  
  5e5ab549929efc7095214540a50e93150281f047
- SHA256
  
  8e2a36792f3bd6d0c6471f907721a48c42a7032926efc842ac1d9662b00582e8
- SHA512
  
  ab3749602129ffc5388e211ee7fbc07bf65ccd5feca7a42fbbf584e8fd6af3d2db2d9eefdc84cd43a434b2239c97ee14f457d44501bd2852ef8fc1d90b3e04f8
- SSDEEP
  
  3072:VSnpywl9Nv3c49nSMhMwM0uusFxynNRCqhVgf5MtuxGQ:Voywl9No/2Ovb
Score

10^/10

google discovery phishing
- Detected google phishing page
  phishing google
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

googlediscoveryphishing

behavioral2

discoveryphishing