4e76960999963dc1edc0f72ab8856bfd430e3118b9174b5e09d8511bb7312099 | Triage

Sharing

General

Target

c2738b65e1b5c9e2decb3427766ccc8f_JaffaCakes118
Size

31KB
Sample

240826-g7n82a1emn
MD5

c2738b65e1b5c9e2decb3427766ccc8f
SHA1

96c1401b1e22387730da13ce28f6106462a95f3f
SHA256

4e76960999963dc1edc0f72ab8856bfd430e3118b9174b5e09d8511bb7312099
SHA512

88fbc5a4dbab574f25c6780214c26aa8a67992f5cdd50cbdf8fe982ecc45e01022599fcff1b1b52a89b13aa14ddb31e0fc2e026ba31c6127787bb906c7419e88
SSDEEP

768:wUvnGO4q4onfxlstuPtJtfNaoyib94gIpbwNL22tM:fuO4+fxlIgJDuib94z1C22tM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c2738b65e1b5c9e2decb3427766ccc8f_JaffaCakes118
- Size
  
  31KB
- MD5
  
  c2738b65e1b5c9e2decb3427766ccc8f
- SHA1
  
  96c1401b1e22387730da13ce28f6106462a95f3f
- SHA256
  
  4e76960999963dc1edc0f72ab8856bfd430e3118b9174b5e09d8511bb7312099
- SHA512
  
  88fbc5a4dbab574f25c6780214c26aa8a67992f5cdd50cbdf8fe982ecc45e01022599fcff1b1b52a89b13aa14ddb31e0fc2e026ba31c6127787bb906c7419e88
- SSDEEP
  
  768:wUvnGO4q4onfxlstuPtJtfNaoyib94gIpbwNL22tM:fuO4+fxlIgJDuib94z1C22tM
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2