995438a5b261557b6fd0856dcdd677009b82ecb443e69d7b4c8c4f88d0982643 | Triage

Sharing

General

Target

00755f86c3dfe39e83fe02940cac436a_JaffaCakes118
Size

333KB
Sample

240930-kre7zawcrq
MD5

00755f86c3dfe39e83fe02940cac436a
SHA1

3e385b002f7bfc3127237f0af3a32fb66bccfd68
SHA256

995438a5b261557b6fd0856dcdd677009b82ecb443e69d7b4c8c4f88d0982643
SHA512

5597dbc8b2fb58704372c549153ae975dd9e6fc3a0d393e9c465354ee04b3d9069a3a98ab79d638bbd241a563f2c7f713f779af722b6d5e483ab12c45795df3e
SSDEEP

6144:dFnB8LNj+pcmVJcemkVLO8/ygsKwTsVGaAnZNj22mTgcYENwpNQK+b:dFnBtpcmTXmk1O8/ygsKwTsVdALj7cWe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  00755f86c3dfe39e83fe02940cac436a_JaffaCakes118
- Size
  
  333KB
- MD5
  
  00755f86c3dfe39e83fe02940cac436a
- SHA1
  
  3e385b002f7bfc3127237f0af3a32fb66bccfd68
- SHA256
  
  995438a5b261557b6fd0856dcdd677009b82ecb443e69d7b4c8c4f88d0982643
- SHA512
  
  5597dbc8b2fb58704372c549153ae975dd9e6fc3a0d393e9c465354ee04b3d9069a3a98ab79d638bbd241a563f2c7f713f779af722b6d5e483ab12c45795df3e
- SSDEEP
  
  6144:dFnB8LNj+pcmVJcemkVLO8/ygsKwTsVGaAnZNj22mTgcYENwpNQK+b:dFnBtpcmTXmk1O8/ygsKwTsVdALj7cWe
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2