61e36184cac8b6b798ebc77ee4eebe447d648a87ecd925f2e4c4f7c632a28b2d | Triage

Sharing

General

Target

951f759848e4d29144404b0bfba66514_JaffaCakes118
Size

55KB
Sample

240814-h4nc1azbjc
MD5

951f759848e4d29144404b0bfba66514
SHA1

adf88fe2b31577f1f460a4fc83249cbb06729a55
SHA256

61e36184cac8b6b798ebc77ee4eebe447d648a87ecd925f2e4c4f7c632a28b2d
SHA512

30931da87d21ee55cb9daf0fbcf9694e2fa2f25e06b93a41e75e14825af358af93f3b041afb5904af25fa8ee4a4fcc509859cab142b081c8b2ef8edc3ebffb84
SSDEEP

1536:kX0+pjhoSmAo3iB7XV6GVRpHn19zE1D56+gGcBJWL:kX0+paSG3sDV6WpHMsVPKL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Label_Copy_UPS.exe
- Size
  
  88KB
- MD5
  
  22ae06e29376b1be53de2a509d734925
- SHA1
  
  6d3ba7c802926d9643eac5fca727c4dd92cf6776
- SHA256
  
  58a713b8201a97ce6e7fb1f0ede65b3d746de0d4bb370247e11b5a4ad34dfe6b
- SHA512
  
  b61b59a45d380576258f5ecde4500502a3cf254c9bfeeaf005fea16ba912b237d2f42cb7d645b6b8c5497e88154e57b1ff24047601d2db163fb3283b31df78ec
- SSDEEP
  
  1536:70qCO2BhXCTswe9phgDB8Zk1a5oc0smGsGVI/Xj/x+DtYBLYabbnS5Es/rmty:7T2PC0u1ooc0kwl+DG1xH8El
Score

7^/10

discovery
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2