General

  • Target
    jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin
  • Size 143KB
  • Sample260925-wbl65asfjb
  • SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin
    • Size 143KB
    • SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Remote Services: SMB/Windows Admin Shares

      Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks