90fc2e3255a59b9e9ae4b8520f126def3f81bf2a5f6152b02a68fbced7f0d709 | Triage

Sharing

General

Target

fece700a3e4ebbe26b7195e759dcb1a7_JaffaCakes118
Size

658KB
Sample

240929-srynbazarj
MD5

fece700a3e4ebbe26b7195e759dcb1a7
SHA1

cf874d66327c67cb002cbe93c9a136fc04f38480
SHA256

90fc2e3255a59b9e9ae4b8520f126def3f81bf2a5f6152b02a68fbced7f0d709
SHA512

e1c65d29de75680e88bdc8c920b40ba8100e8529dd3c6f7034fc43755dc344efe7a515467f0c42ecdf51f0fe59c3bb9c902a5db940a45792d137143cd8742750
SSDEEP

12288:NW9uSINkXESJqJFfMGJFdAgQ4e2F3Z4mxxCJljgAN7vYZJz/P6:NAoUEShGJAgQ92QmXCJhPN7vYZZX6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fece700a3e4ebbe26b7195e759dcb1a7_JaffaCakes118
- Size
  
  658KB
- MD5
  
  fece700a3e4ebbe26b7195e759dcb1a7
- SHA1
  
  cf874d66327c67cb002cbe93c9a136fc04f38480
- SHA256
  
  90fc2e3255a59b9e9ae4b8520f126def3f81bf2a5f6152b02a68fbced7f0d709
- SHA512
  
  e1c65d29de75680e88bdc8c920b40ba8100e8529dd3c6f7034fc43755dc344efe7a515467f0c42ecdf51f0fe59c3bb9c902a5db940a45792d137143cd8742750
- SSDEEP
  
  12288:NW9uSINkXESJqJFfMGJFdAgQ4e2F3Z4mxxCJljgAN7vYZJz/P6:NAoUEShGJAgQ92QmXCJhPN7vYZZX6
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2