4e2bbb41118b1542bb8d2506d9ff8c23b1e812dc35b202f05e4a8db148cf7538 | Triage

Sharing

General

Target

a48838aa0b83749399f7f5979de1f37e_JaffaCakes118
Size

52KB
Sample

240817-28a31svhkq
MD5

a48838aa0b83749399f7f5979de1f37e
SHA1

6f26056eb0942f4ae8280167e7995370ebf5e3a0
SHA256

4e2bbb41118b1542bb8d2506d9ff8c23b1e812dc35b202f05e4a8db148cf7538
SHA512

f3ec27a3015f5b5f1d5770712053834be269a187b073436061060c6cc98486be3097175fb3133375d406a8ae6222dd8138eef92d68c14e981e3f1fb67199b619
SSDEEP

768:HzIXeyKSYbzMi5dIEkLYthb3I+zIXX+PXRFUuWb+YL7UXtDUcV3hXndsD:TIPKSYbzMiHk6hb3BFUH+YLGWcfn+D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a48838aa0b83749399f7f5979de1f37e_JaffaCakes118
- Size
  
  52KB
- MD5
  
  a48838aa0b83749399f7f5979de1f37e
- SHA1
  
  6f26056eb0942f4ae8280167e7995370ebf5e3a0
- SHA256
  
  4e2bbb41118b1542bb8d2506d9ff8c23b1e812dc35b202f05e4a8db148cf7538
- SHA512
  
  f3ec27a3015f5b5f1d5770712053834be269a187b073436061060c6cc98486be3097175fb3133375d406a8ae6222dd8138eef92d68c14e981e3f1fb67199b619
- SSDEEP
  
  768:HzIXeyKSYbzMi5dIEkLYthb3I+zIXX+PXRFUuWb+YL7UXtDUcV3hXndsD:TIPKSYbzMiHk6hb3BFUH+YLGWcfn+D
Score

7^/10

discovery
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2