c63e5cc2041844a51b776dbf9215a583b57b00f9eef9696f2e27101fc6fa9a56 | Triage

Sharing

General

Target

e76d63e042813a1e30932b65d57bbdc9_JaffaCakes118
Size

240KB
Sample

240921-yb75pszckr
MD5

e76d63e042813a1e30932b65d57bbdc9
SHA1

ae365aeee90968fd1087b3d4e8cec10507e5299b
SHA256

c63e5cc2041844a51b776dbf9215a583b57b00f9eef9696f2e27101fc6fa9a56
SHA512

935eda52d6eb2795f295a391fd4eadcfb380c78b658c983c738f16b8ba869ceeebc489b5c1aad1e09609b243ee435604e93ee2958dbe473db57612a630c26c83
SSDEEP

6144:3fC2F8NXC796TB9vj48PZyjtQYwoBP94KMjls9u0Jf:3deVQkTrvj4GyhQ+Mjls9D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e76d63e042813a1e30932b65d57bbdc9_JaffaCakes118
- Size
  
  240KB
- MD5
  
  e76d63e042813a1e30932b65d57bbdc9
- SHA1
  
  ae365aeee90968fd1087b3d4e8cec10507e5299b
- SHA256
  
  c63e5cc2041844a51b776dbf9215a583b57b00f9eef9696f2e27101fc6fa9a56
- SHA512
  
  935eda52d6eb2795f295a391fd4eadcfb380c78b658c983c738f16b8ba869ceeebc489b5c1aad1e09609b243ee435604e93ee2958dbe473db57612a630c26c83
- SSDEEP
  
  6144:3fC2F8NXC796TB9vj48PZyjtQYwoBP94KMjls9u0Jf:3deVQkTrvj4GyhQ+Mjls9D
Score

7^/10

discovery
- Uses the VBS compiler for execution
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2