c2386579a2097a862d86e668da993c1b27ab8cb105f99232ef26e0a8689587ac | Triage

Sharing

General

Target

f6d145fd96d1436269908670ec102229_JaffaCakes118
Size

386KB
Sample

240925-zf1rvszdlc
MD5

f6d145fd96d1436269908670ec102229
SHA1

a94885ea36a1d435d937b20810d955de93dcaadc
SHA256

c2386579a2097a862d86e668da993c1b27ab8cb105f99232ef26e0a8689587ac
SHA512

b61c4ef8a7650ee281a81f41b68b7aec4a07ac28d933fe79cf2ac07d1c6bafee15e9f43ccaaee3c898de64abaaa5d13846dc2855313dd978eb53abb28910a428
SSDEEP

6144:CCcCi7VKKojqx67WmtVG0Ee0Wnnv4fYgPGRJFEEj8G:CCc7kZjz7zrdv4oDWc8G

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f6d145fd96d1436269908670ec102229_JaffaCakes118
- Size
  
  386KB
- MD5
  
  f6d145fd96d1436269908670ec102229
- SHA1
  
  a94885ea36a1d435d937b20810d955de93dcaadc
- SHA256
  
  c2386579a2097a862d86e668da993c1b27ab8cb105f99232ef26e0a8689587ac
- SHA512
  
  b61c4ef8a7650ee281a81f41b68b7aec4a07ac28d933fe79cf2ac07d1c6bafee15e9f43ccaaee3c898de64abaaa5d13846dc2855313dd978eb53abb28910a428
- SSDEEP
  
  6144:CCcCi7VKKojqx67WmtVG0Ee0Wnnv4fYgPGRJFEEj8G:CCc7kZjz7zrdv4oDWc8G
Score

7^/10

discovery
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2