0c20acca80242732687d201d4817df9b71886be67dc34a5e2c24218b1eb0835b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0967913054a0468ae01e2cf173e89c5_JaffaCakes118
Size

290KB
Sample

240906-2kp72a1fpr
MD5

d0967913054a0468ae01e2cf173e89c5
SHA1

7dee6876c1a741275f4f1780d167e39c73acd290
SHA256

0c20acca80242732687d201d4817df9b71886be67dc34a5e2c24218b1eb0835b
SHA512

0b049e4b1a266a2f812d503dcf2179f34874a2a792774111249caad0e16666d0972d6cb6d5ecebd079698b86e58048fd21b87bf3e27894e182234f07eac07b3d
SSDEEP

6144:qZplSpwW5pbpVJv9fe38XoJE14YG/0rxMxYLHq1/DaZWuZGMD+75Tyy:qlSpwmpZv8faeD0rcN2pglN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d0967913054a0468ae01e2cf173e89c5_JaffaCakes118
- Size
  
  290KB
- MD5
  
  d0967913054a0468ae01e2cf173e89c5
- SHA1
  
  7dee6876c1a741275f4f1780d167e39c73acd290
- SHA256
  
  0c20acca80242732687d201d4817df9b71886be67dc34a5e2c24218b1eb0835b
- SHA512
  
  0b049e4b1a266a2f812d503dcf2179f34874a2a792774111249caad0e16666d0972d6cb6d5ecebd079698b86e58048fd21b87bf3e27894e182234f07eac07b3d
- SSDEEP
  
  6144:qZplSpwW5pbpVJv9fe38XoJE14YG/0rxMxYLHq1/DaZWuZGMD+75Tyy:qlSpwmpZv8faeD0rcN2pglN
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2