05da2fbd1d9eb978f25aa7d08cbc6516cf31c57e4c2b2591c7ba750c9e0992df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e195f20e80173547909ac3686ab780_JaffaCakes118
Size

656KB
Sample

240930-xx377svdrf
MD5

02e195f20e80173547909ac3686ab780
SHA1

6f7bbf5088ddcc0f8de8bb98f04ad6488b3610a4
SHA256

05da2fbd1d9eb978f25aa7d08cbc6516cf31c57e4c2b2591c7ba750c9e0992df
SHA512

d2fc55a943947b0ff2b4dd672b367c07db89571b518aa90b76e24c8eb6370042f093919eea8c1fc52648cb5cb2516aeb8026f8a88015ab93125ed5ecb9f270ac
SSDEEP

12288:GPaWFWpFvoeGorTCPmNUXpk6JOBdFe5pNYxjhpza02bLD1cl25JtUu/qBiN9:TFvoTEQCUZkD7xjXabH1+eJtUe

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  02e195f20e80173547909ac3686ab780_JaffaCakes118
- Size
  
  656KB
- MD5
  
  02e195f20e80173547909ac3686ab780
- SHA1
  
  6f7bbf5088ddcc0f8de8bb98f04ad6488b3610a4
- SHA256
  
  05da2fbd1d9eb978f25aa7d08cbc6516cf31c57e4c2b2591c7ba750c9e0992df
- SHA512
  
  d2fc55a943947b0ff2b4dd672b367c07db89571b518aa90b76e24c8eb6370042f093919eea8c1fc52648cb5cb2516aeb8026f8a88015ab93125ed5ecb9f270ac
- SSDEEP
  
  12288:GPaWFWpFvoeGorTCPmNUXpk6JOBdFe5pNYxjhpza02bLD1cl25JtUu/qBiN9:TFvoTEQCUZkD7xjXabH1+eJtUe
Score

5^/10

discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2