39b3cd2f89c4de752b481f17a8e51b7b7dcb16d8695a62c7990ab7b9339c6482 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b005faa45f79df0bb16c552140ede48c_JaffaCakes118
Size

184KB
Sample

240820-t9pzkawgrl
MD5

b005faa45f79df0bb16c552140ede48c
SHA1

aec5306279da34c0593f9bedbe9d827d2380b41f
SHA256

39b3cd2f89c4de752b481f17a8e51b7b7dcb16d8695a62c7990ab7b9339c6482
SHA512

7cf825a5af3b7606156bb63c2ace7cad446d0c3d823b6738fa6bd186f13e6d79e7d2f4c2e6f071599d6a9bd4129c5728bbf5543177a3f7ad7667b54845cd3380
SSDEEP

3072:AbNUlvlpZr3AlBdTk39JV24VyRDvJ0wwSWmHv25gq/j5jP0rqPgVNhUS:AmnrWFuM1pyiWmHIdpoVNa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b005faa45f79df0bb16c552140ede48c_JaffaCakes118
- Size
  
  184KB
- MD5
  
  b005faa45f79df0bb16c552140ede48c
- SHA1
  
  aec5306279da34c0593f9bedbe9d827d2380b41f
- SHA256
  
  39b3cd2f89c4de752b481f17a8e51b7b7dcb16d8695a62c7990ab7b9339c6482
- SHA512
  
  7cf825a5af3b7606156bb63c2ace7cad446d0c3d823b6738fa6bd186f13e6d79e7d2f4c2e6f071599d6a9bd4129c5728bbf5543177a3f7ad7667b54845cd3380
- SSDEEP
  
  3072:AbNUlvlpZr3AlBdTk39JV24VyRDvJ0wwSWmHv25gq/j5jP0rqPgVNhUS:AmnrWFuM1pyiWmHIdpoVNa
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2