72c787288d5592cc86f7a6556042a2da1059925682c7c10dd7c05000da453e39 | Triage

Sharing

General

Target

b501aba04c3b15988a4b6c7402b005bb_JaffaCakes118
Size

22KB
Sample

240821-zps4dateqk
MD5

b501aba04c3b15988a4b6c7402b005bb
SHA1

37c735bb479a37db922ee73306ec4d6bbb802c37
SHA256

72c787288d5592cc86f7a6556042a2da1059925682c7c10dd7c05000da453e39
SHA512

4621311fa46dffd24793b568476a5a3041b1e1bc89f3a5e5f8fc8dcd3cf825331b58424d44780c54367b5beb746f87e0e9577125acc97fcb34978f7f27e1ef9b
SSDEEP

384:IDD2TOgvcVuoA19Ai0eVwkxiz7eqoeNM6KMaHVya4eYnq+GpzHtpPKF3:MXuoAzrDqoB4fIpzNpPK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b501aba04c3b15988a4b6c7402b005bb_JaffaCakes118
- Size
  
  22KB
- MD5
  
  b501aba04c3b15988a4b6c7402b005bb
- SHA1
  
  37c735bb479a37db922ee73306ec4d6bbb802c37
- SHA256
  
  72c787288d5592cc86f7a6556042a2da1059925682c7c10dd7c05000da453e39
- SHA512
  
  4621311fa46dffd24793b568476a5a3041b1e1bc89f3a5e5f8fc8dcd3cf825331b58424d44780c54367b5beb746f87e0e9577125acc97fcb34978f7f27e1ef9b
- SSDEEP
  
  384:IDD2TOgvcVuoA19Ai0eVwkxiz7eqoeNM6KMaHVya4eYnq+GpzHtpPKF3:MXuoAzrDqoB4fIpzNpPK
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2