409583e76b757fc71973c62b22a364395f05b622b3b17cff8d004d925e16c194 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef3795dedc21d955692da6c649d0fd3f_JaffaCakes118
Size

131KB
Sample

240921-g1wdrsydqr
MD5

ef3795dedc21d955692da6c649d0fd3f
SHA1

c20a1103923a86819d7660b34d67cb742fffcf85
SHA256

409583e76b757fc71973c62b22a364395f05b622b3b17cff8d004d925e16c194
SHA512

a7d2802853c78d319c0afb620dff62e51ea4ebedcdfbb688b7dd6c45c5fd125a48b9f112c2241187a9799452e8d16bc05372c4add54936beaee4ede70e9af6c8
SSDEEP

3072:tNduYs0hN8e3xrch0s9RAvv5A/wFbbBFuSlAY5MH8gLiS5:/duYjhWe9ch0auIfSlAY5MHN

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  ef3795dedc21d955692da6c649d0fd3f_JaffaCakes118
- Size
  
  131KB
- MD5
  
  ef3795dedc21d955692da6c649d0fd3f
- SHA1
  
  c20a1103923a86819d7660b34d67cb742fffcf85
- SHA256
  
  409583e76b757fc71973c62b22a364395f05b622b3b17cff8d004d925e16c194
- SHA512
  
  a7d2802853c78d319c0afb620dff62e51ea4ebedcdfbb688b7dd6c45c5fd125a48b9f112c2241187a9799452e8d16bc05372c4add54936beaee4ede70e9af6c8
- SSDEEP
  
  3072:tNduYs0hN8e3xrch0s9RAvv5A/wFbbBFuSlAY5MH8gLiS5:/duYjhWe9ch0auIfSlAY5MHN
Score

5^/10

discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2