1584acf5d30ede3e3dcef3cb07158cf63bb5a32c2a32e673514eec8a2b0ee56a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad0489255ff64dbc9da4d8e598f2c488_JaffaCakes118
Size

583KB
Sample

240819-3f73qawajr
MD5

ad0489255ff64dbc9da4d8e598f2c488
SHA1

a0ca3ccecb58647848e01090614511dfe283bfc6
SHA256

1584acf5d30ede3e3dcef3cb07158cf63bb5a32c2a32e673514eec8a2b0ee56a
SHA512

74f3d75d59773937aec4afd73f21d1cdd3d82fa06ff4bc42d6fc3e6b33244d33d7a93e63927238b3cad730c9e2de1f7923c289ecd0a6a5aa56fcc755a12b3b99
SSDEEP

12288:rUcOBfsO/xEpxKrd5RBWKqfuLQJjyxF3Z4mxxkhsV4AOwf7DGj7Xn:WBfsO/KpQ5+HJjyxQmXOYtfujT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ad0489255ff64dbc9da4d8e598f2c488_JaffaCakes118
- Size
  
  583KB
- MD5
  
  ad0489255ff64dbc9da4d8e598f2c488
- SHA1
  
  a0ca3ccecb58647848e01090614511dfe283bfc6
- SHA256
  
  1584acf5d30ede3e3dcef3cb07158cf63bb5a32c2a32e673514eec8a2b0ee56a
- SHA512
  
  74f3d75d59773937aec4afd73f21d1cdd3d82fa06ff4bc42d6fc3e6b33244d33d7a93e63927238b3cad730c9e2de1f7923c289ecd0a6a5aa56fcc755a12b3b99
- SSDEEP
  
  12288:rUcOBfsO/xEpxKrd5RBWKqfuLQJjyxF3Z4mxxkhsV4AOwf7DGj7Xn:WBfsO/KpQ5+HJjyxQmXOYtfujT
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2