d7faa0dd54a1292e42aa092d4d632efd6116d738cd89341ecf75d1e442405ecc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b875f167d50614f072dd44781735a0a8_JaffaCakes118
Size

171KB
Sample

240822-vvq4ra1dkn
MD5

b875f167d50614f072dd44781735a0a8
SHA1

f3e158063a77e52d24c895b4892d89c9e22b8b95
SHA256

d7faa0dd54a1292e42aa092d4d632efd6116d738cd89341ecf75d1e442405ecc
SHA512

2a941c66639f3c9f04d9b27ec046a3125670e5d254203bd3d1ad8e79a5516540cf7a39f7e1eaca97695a2381cbcb756e8864f483aad7ad2bb689540556dc2b0a
SSDEEP

3072:mUBGr35DOb59DBohBi1OzYfB0sQaNn2x16on1Ov/V+dfw5coPiKkvucdnOlmM:mCK3dej6BtYDQa0D6on1OcF7oPinjOlm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b875f167d50614f072dd44781735a0a8_JaffaCakes118
- Size
  
  171KB
- MD5
  
  b875f167d50614f072dd44781735a0a8
- SHA1
  
  f3e158063a77e52d24c895b4892d89c9e22b8b95
- SHA256
  
  d7faa0dd54a1292e42aa092d4d632efd6116d738cd89341ecf75d1e442405ecc
- SHA512
  
  2a941c66639f3c9f04d9b27ec046a3125670e5d254203bd3d1ad8e79a5516540cf7a39f7e1eaca97695a2381cbcb756e8864f483aad7ad2bb689540556dc2b0a
- SSDEEP
  
  3072:mUBGr35DOb59DBohBi1OzYfB0sQaNn2x16on1Ov/V+dfw5coPiKkvucdnOlmM:mCK3dej6BtYDQa0D6on1OcF7oPinjOlm
Score

7^/10

discovery
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2