998ad4aa8187efc0a982ba7bbae7bccf46c770a1e6332a655bb0660776bf43e2 | Triage

Sharing

General

Target

e9cdcf4e370dd7cbb50f6ee66f2270a6_JaffaCakes118
Size

458KB
Sample

240918-xxqbcayfpl
MD5

e9cdcf4e370dd7cbb50f6ee66f2270a6
SHA1

1895936523ba23b7b9ca9e976bc1e111ddb3adb4
SHA256

998ad4aa8187efc0a982ba7bbae7bccf46c770a1e6332a655bb0660776bf43e2
SHA512

78379c6f9a1a436d07bb0fa925d020701be4df4d4afd87d52f873d8b67c249b2d17c9199bfd89172ce675ad145f775913611c5817503c7cb6b0c1fa5cd2fc29e
SSDEEP

6144:YEwxGxb1xzRG4oTmloj8AyYIuHI1mwat/4J5loTIz/ejrk5an360O80nf0i2O:YBcpfRMmm4AyYI/mwe/alToKw08i2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e9cdcf4e370dd7cbb50f6ee66f2270a6_JaffaCakes118
- Size
  
  458KB
- MD5
  
  e9cdcf4e370dd7cbb50f6ee66f2270a6
- SHA1
  
  1895936523ba23b7b9ca9e976bc1e111ddb3adb4
- SHA256
  
  998ad4aa8187efc0a982ba7bbae7bccf46c770a1e6332a655bb0660776bf43e2
- SHA512
  
  78379c6f9a1a436d07bb0fa925d020701be4df4d4afd87d52f873d8b67c249b2d17c9199bfd89172ce675ad145f775913611c5817503c7cb6b0c1fa5cd2fc29e
- SSDEEP
  
  6144:YEwxGxb1xzRG4oTmloj8AyYIuHI1mwat/4J5loTIz/ejrk5an360O80nf0i2O:YBcpfRMmm4AyYI/mwe/alToKw08i2
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2