d0e3da2bd90e63e840633a5d6c9f4d6ee75c03eb2d7234321968d18c461d0510 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

976202270cd42bf97ca0a3c622cd1695_JaffaCakes118
Size

257KB
Sample

240814-x96h4azfjd
MD5

976202270cd42bf97ca0a3c622cd1695
SHA1

9f69f9cb47fd1b0027b20d60f27284bbde1b8d48
SHA256

d0e3da2bd90e63e840633a5d6c9f4d6ee75c03eb2d7234321968d18c461d0510
SHA512

a048a01b24bde6376099d7309e10ddc9ade6e7d6090597db0b2ae598527ec0e93e32d29703b8364dc35213564c69736647634832b4007912faf307ec3339239a
SSDEEP

6144:t54Ua2tL4zHMW842Cmh9jWzhTDM4K7VFkze1asIc:r4UtoHMr4Nm3jWzhnMZ77+e3V

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  976202270cd42bf97ca0a3c622cd1695_JaffaCakes118
- Size
  
  257KB
- MD5
  
  976202270cd42bf97ca0a3c622cd1695
- SHA1
  
  9f69f9cb47fd1b0027b20d60f27284bbde1b8d48
- SHA256
  
  d0e3da2bd90e63e840633a5d6c9f4d6ee75c03eb2d7234321968d18c461d0510
- SHA512
  
  a048a01b24bde6376099d7309e10ddc9ade6e7d6090597db0b2ae598527ec0e93e32d29703b8364dc35213564c69736647634832b4007912faf307ec3339239a
- SSDEEP
  
  6144:t54Ua2tL4zHMW842Cmh9jWzhTDM4K7VFkze1asIc:r4UtoHMr4Nm3jWzhnMZ77+e3V
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2