e1afb21b699a25b8c31493f82b6e4689a2d9945ca64f848e48d8e270a0501007 | Triage

Sharing

General

Target

ead2d46f03875d1f0e8b4ad0e1571f31_JaffaCakes118
Size

296KB
Sample

240919-hzzv8sxakp
MD5

ead2d46f03875d1f0e8b4ad0e1571f31
SHA1

dc4732250c5617fa3552dec1fcc90155c116e092
SHA256

e1afb21b699a25b8c31493f82b6e4689a2d9945ca64f848e48d8e270a0501007
SHA512

6a31b0e0c069f2cc572e33ff4dcc1dcd941256cac2ac39ae26faaa4e827b09c3184bd2c104a5a962815435968ba62b398cdf6e418790f3a2f2b55868a4e7685e
SSDEEP

6144:rUF6pAhaE6OWTm6pdVD2lyT/7jUd9/p8hI+te1AawYjs/oS:rUQNrLD2lybPUv/EIMVawpoS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ead2d46f03875d1f0e8b4ad0e1571f31_JaffaCakes118
- Size
  
  296KB
- MD5
  
  ead2d46f03875d1f0e8b4ad0e1571f31
- SHA1
  
  dc4732250c5617fa3552dec1fcc90155c116e092
- SHA256
  
  e1afb21b699a25b8c31493f82b6e4689a2d9945ca64f848e48d8e270a0501007
- SHA512
  
  6a31b0e0c069f2cc572e33ff4dcc1dcd941256cac2ac39ae26faaa4e827b09c3184bd2c104a5a962815435968ba62b398cdf6e418790f3a2f2b55868a4e7685e
- SSDEEP
  
  6144:rUF6pAhaE6OWTm6pdVD2lyT/7jUd9/p8hI+te1AawYjs/oS:rUQNrLD2lybPUv/EIMVawpoS
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2