gh0strat | 5d2cf221ef4fec418ffa01192c9e6b450fad10387b33b015e83b7b4eee03365b | Triage

Sharing

General

Target

JaffaCakes118_42ec0a81c59ad6430f4bde00b4026ac0
Size

148KB
Sample

250302-15zfrsxls3
MD5

42ec0a81c59ad6430f4bde00b4026ac0
SHA1

f4c58d45f55931a27dc53d442b0b82b80c54a87f
SHA256

5d2cf221ef4fec418ffa01192c9e6b450fad10387b33b015e83b7b4eee03365b
SHA512

ec189867900214935958fb644b919ae5f974d64a794c5cd3b6911e86f2409dd7d6cca14b00aa07bc309d8c9e3ba04b589cd86ac31bfb22bc178fde20729a555a
SSDEEP

3072:gsPU/BXzPyYv7QgXNzcjDitwlfPRDOvdFTBft4dfLHtlRiz:F8JuYv5zlu3hOvdFTBlafLHtlY

Score

10^/10

gh0strat discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_42ec0a81c59ad6430f4bde00b4026ac0
- Size
  
  148KB
- MD5
  
  42ec0a81c59ad6430f4bde00b4026ac0
- SHA1
  
  f4c58d45f55931a27dc53d442b0b82b80c54a87f
- SHA256
  
  5d2cf221ef4fec418ffa01192c9e6b450fad10387b33b015e83b7b4eee03365b
- SHA512
  
  ec189867900214935958fb644b919ae5f974d64a794c5cd3b6911e86f2409dd7d6cca14b00aa07bc309d8c9e3ba04b589cd86ac31bfb22bc178fde20729a555a
- SSDEEP
  
  3072:gsPU/BXzPyYv7QgXNzcjDitwlfPRDOvdFTBft4dfLHtlRiz:F8JuYv5zlu3hOvdFTBlafLHtlY
Score

5^/10

discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2