4ff80d2fa3c8165196c1d638bffc9edcdc96872adae733d1b6c29b33e15352cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9b1d9a02282708a815c64a7d6127ac8_JaffaCakes118
Size

73KB
Sample

240911-f37ddavbmj
MD5

d9b1d9a02282708a815c64a7d6127ac8
SHA1

689d3ff5a59ff0e1920dac65f001d3a781f7abfb
SHA256

4ff80d2fa3c8165196c1d638bffc9edcdc96872adae733d1b6c29b33e15352cc
SHA512

009abb5eaeb2f884eba0e8e598773602794b3474cd8880cdeef9dac287eb4852445b31fbe2f7f89dfdae203df6813db32a85b6f90dce4482d8a3f695bcdcee55
SSDEEP

768:TTNmBtyvWSZivg+cFlEk1tqUME9ngPXFIT9D6fJUNbwa9RjXHq1WgAO5zRqiIbEW:N44Zi/XMqr/129G2FwM2RXBvQIVDB7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d9b1d9a02282708a815c64a7d6127ac8_JaffaCakes118
- Size
  
  73KB
- MD5
  
  d9b1d9a02282708a815c64a7d6127ac8
- SHA1
  
  689d3ff5a59ff0e1920dac65f001d3a781f7abfb
- SHA256
  
  4ff80d2fa3c8165196c1d638bffc9edcdc96872adae733d1b6c29b33e15352cc
- SHA512
  
  009abb5eaeb2f884eba0e8e598773602794b3474cd8880cdeef9dac287eb4852445b31fbe2f7f89dfdae203df6813db32a85b6f90dce4482d8a3f695bcdcee55
- SSDEEP
  
  768:TTNmBtyvWSZivg+cFlEk1tqUME9ngPXFIT9D6fJUNbwa9RjXHq1WgAO5zRqiIbEW:N44Zi/XMqr/129G2FwM2RXBvQIVDB7
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2