bc1648d0591545344cc66bbc6eea8825c6fe57e085e09fa3ec40be2bef58e057 | Triage

Sharing

General

Target

0e19f646ff2794f33a6cd327963a76ed_JaffaCakes118
Size

749KB
Sample

240625-ptt65atarp
MD5

0e19f646ff2794f33a6cd327963a76ed
SHA1

74e8d0dd5cc9421707c9e51e890a1fd20e36a12f
SHA256

bc1648d0591545344cc66bbc6eea8825c6fe57e085e09fa3ec40be2bef58e057
SHA512

65efb026210565937b32348fa2fc4206fd6767349bcfdca5a509d4378ffa093a862534b3446b9a24edaf2a8f4072b2cf3d7a0857acc5ded9a43bd8218850afc2
SSDEEP

12288:F9SF1sN6UO6JBv2vRuQnhEc/CKPf76O8o+O7IvoOupX/0RsdY6Vk5VlO4OJ0:FN6H6K5hdfcoTIYv0A6l5

Score

5^/10

Malware Config

Targets

- Target
  
  0e19f646ff2794f33a6cd327963a76ed_JaffaCakes118
- Size
  
  749KB
- MD5
  
  0e19f646ff2794f33a6cd327963a76ed
- SHA1
  
  74e8d0dd5cc9421707c9e51e890a1fd20e36a12f
- SHA256
  
  bc1648d0591545344cc66bbc6eea8825c6fe57e085e09fa3ec40be2bef58e057
- SHA512
  
  65efb026210565937b32348fa2fc4206fd6767349bcfdca5a509d4378ffa093a862534b3446b9a24edaf2a8f4072b2cf3d7a0857acc5ded9a43bd8218850afc2
- SSDEEP
  
  12288:F9SF1sN6UO6JBv2vRuQnhEc/CKPf76O8o+O7IvoOupX/0RsdY6Vk5VlO4OJ0:FN6H6K5hdfcoTIYv0A6l5
Score

5^/10
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2