3d95cc8b80a7b821f0bf3efc216e5cf9c5be3ea1f62e319c100f25c232d1a6be | Triage

Sharing

General

Target

c8a46a6c3be18c0bcb8832b7dc2826dc_JaffaCakes118
Size

317KB
Sample

240829-mg1r2awglf
MD5

c8a46a6c3be18c0bcb8832b7dc2826dc
SHA1

ebe5eb43572302a1f78c1b379730447f61748606
SHA256

3d95cc8b80a7b821f0bf3efc216e5cf9c5be3ea1f62e319c100f25c232d1a6be
SHA512

718386843039f6fd523eeb2c43844ebe904b2ebbc13d12bb2c09246f35ef272b2a4f37ac4bee57c023232a8dcf4592ed97004d180d5e4fafa26a2f0db0c258c0
SSDEEP

6144:Bw9WVQc2tk+mRmtbGcQqJ+5eQZbKTjD+h53XVH0XCLJSj1loLNODMLBKwfQR9Znx:BwDamtbGlogbKTjD+XnVSH1AcKKwYvtx

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  c8a46a6c3be18c0bcb8832b7dc2826dc_JaffaCakes118
- Size
  
  317KB
- MD5
  
  c8a46a6c3be18c0bcb8832b7dc2826dc
- SHA1
  
  ebe5eb43572302a1f78c1b379730447f61748606
- SHA256
  
  3d95cc8b80a7b821f0bf3efc216e5cf9c5be3ea1f62e319c100f25c232d1a6be
- SHA512
  
  718386843039f6fd523eeb2c43844ebe904b2ebbc13d12bb2c09246f35ef272b2a4f37ac4bee57c023232a8dcf4592ed97004d180d5e4fafa26a2f0db0c258c0
- SSDEEP
  
  6144:Bw9WVQc2tk+mRmtbGcQqJ+5eQZbKTjD+h53XVH0XCLJSj1loLNODMLBKwfQR9Znx:BwDamtbGlogbKTjD+XnVSH1AcKKwYvtx
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2