14b0b0ccf74974c9cb0a72c4cf59575b101dc9482eb4f0395ca45ad0bdd55af0 | Triage

Sharing

General

Target

b7f2020cc2d8ec3c7e6c2f01a41b943f_JaffaCakes118
Size

476KB
Sample

240822-rhbazs1dpg
MD5

b7f2020cc2d8ec3c7e6c2f01a41b943f
SHA1

f0a42a1b859d2b76fefd7b512b93cc09e5822f5b
SHA256

14b0b0ccf74974c9cb0a72c4cf59575b101dc9482eb4f0395ca45ad0bdd55af0
SHA512

ca486e7f68092dcd84214e629426ff8e20384ec3320b7180de2f8a0c2421398da5f9fae4553150d07fb0357fda1bcd3d3ffbf677afb279906bbb4d88d828499f
SSDEEP

3072:uLxXwSmJQMva8zFki2kXbcvpoADa1xx7RWrjG9t2U2L4MV9d+hJRIYTkTl8QWzpX:bJZv5zFiIOoPv949aRbQWz1R5L

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  b7f2020cc2d8ec3c7e6c2f01a41b943f_JaffaCakes118
- Size
  
  476KB
- MD5
  
  b7f2020cc2d8ec3c7e6c2f01a41b943f
- SHA1
  
  f0a42a1b859d2b76fefd7b512b93cc09e5822f5b
- SHA256
  
  14b0b0ccf74974c9cb0a72c4cf59575b101dc9482eb4f0395ca45ad0bdd55af0
- SHA512
  
  ca486e7f68092dcd84214e629426ff8e20384ec3320b7180de2f8a0c2421398da5f9fae4553150d07fb0357fda1bcd3d3ffbf677afb279906bbb4d88d828499f
- SSDEEP
  
  3072:uLxXwSmJQMva8zFki2kXbcvpoADa1xx7RWrjG9t2U2L4MV9d+hJRIYTkTl8QWzpX:bJZv5zFiIOoPv949aRbQWz1R5L
Score

5^/10

discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2