6d3415233b968c7d3b908d95ff649507097d8b7e0fffcfb5e42716b96cafcf2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78c145aa6937af9ccd855169e97adab9_JaffaCakes118
Size

374KB
Sample

240727-tq3fjs1bka
MD5

78c145aa6937af9ccd855169e97adab9
SHA1

a73ace4b512c7923aea1b4045faab44b723a6103
SHA256

6d3415233b968c7d3b908d95ff649507097d8b7e0fffcfb5e42716b96cafcf2e
SHA512

295952331ac2b8c3494b02d2bb461eee346d30b3723d86fd8f430832009fe7180fbee61e0af58bcbcb1a0c1c8eb1be38b6e4a23a8f8f030eb4320f4a936924e5
SSDEEP

6144:unBgzvrz0hrinKXkkJteVHal1KAepkxPgsnJ1v1ukCKGRPqzb4LObsteKleG/Q4t:Zzvr4hFJtmAKjpSPn98KMP44LObme2e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  78c145aa6937af9ccd855169e97adab9_JaffaCakes118
- Size
  
  374KB
- MD5
  
  78c145aa6937af9ccd855169e97adab9
- SHA1
  
  a73ace4b512c7923aea1b4045faab44b723a6103
- SHA256
  
  6d3415233b968c7d3b908d95ff649507097d8b7e0fffcfb5e42716b96cafcf2e
- SHA512
  
  295952331ac2b8c3494b02d2bb461eee346d30b3723d86fd8f430832009fe7180fbee61e0af58bcbcb1a0c1c8eb1be38b6e4a23a8f8f030eb4320f4a936924e5
- SSDEEP
  
  6144:unBgzvrz0hrinKXkkJteVHal1KAepkxPgsnJ1v1ukCKGRPqzb4LObsteKleG/Q4t:Zzvr4hFJtmAKjpSPn98KMP44LObme2e
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2