29e6607bc9fff9760f0b0bd9d7b72c8b5efdfbfcb77e4e8d14179c43dc364890 | Triage

Sharing

General

Target

e162e8dda0717ba636f9095d9f205e35_JaffaCakes118
Size

104KB
Sample

240915-bavrnaxaqj
MD5

e162e8dda0717ba636f9095d9f205e35
SHA1

2811952966f8afec649b11ddcc62cb4fcef970e7
SHA256

29e6607bc9fff9760f0b0bd9d7b72c8b5efdfbfcb77e4e8d14179c43dc364890
SHA512

11ff8a004621b1f8ae7e5ee3a41922d59abc3b84018fbe913b27ef8eefbbeaa8702d0ae1d352ca0f8fa068d9ebf88b282bb93a2ff870e148a121319e60d90f8e
SSDEEP

1536:E4Ymw0N2PzpLcVfzlWraWz7nQ818uMHVM87GDxaE6x1d:d/w0GVLcVYz7h189M8KDsE

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  e162e8dda0717ba636f9095d9f205e35_JaffaCakes118
- Size
  
  104KB
- MD5
  
  e162e8dda0717ba636f9095d9f205e35
- SHA1
  
  2811952966f8afec649b11ddcc62cb4fcef970e7
- SHA256
  
  29e6607bc9fff9760f0b0bd9d7b72c8b5efdfbfcb77e4e8d14179c43dc364890
- SHA512
  
  11ff8a004621b1f8ae7e5ee3a41922d59abc3b84018fbe913b27ef8eefbbeaa8702d0ae1d352ca0f8fa068d9ebf88b282bb93a2ff870e148a121319e60d90f8e
- SSDEEP
  
  1536:E4Ymw0N2PzpLcVfzlWraWz7nQ818uMHVM87GDxaE6x1d:d/w0GVLcVYz7h189M8KDsE
Score

5^/10

discovery
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2