a2db3a7181a95fbaa58f4dcf0e7f836755183c3e159e3a14b3f21f12d2ddfa74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1204f5e666f21fd071dda0516ffddc11_JaffaCakes118
Size

30KB
Sample

241004-f5l58a1bme
MD5

1204f5e666f21fd071dda0516ffddc11
SHA1

03e44b9f58e220aeb3415a417ea0c4a5b3c0e3a5
SHA256

a2db3a7181a95fbaa58f4dcf0e7f836755183c3e159e3a14b3f21f12d2ddfa74
SHA512

e857a3c1f5b5ff723c454117fe0a3ca3339b20a313415a72e2641aac2d7b7881b636a516d58b07fe30e6aa69557b437701372d18419dc8f941ef89f865366c79
SSDEEP

768:RSACC8BMSaIp2QRB/YDF4NIZbYmuZNnvcze:RSAqewJb0F4NIZbM/Uze

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1204f5e666f21fd071dda0516ffddc11_JaffaCakes118
- Size
  
  30KB
- MD5
  
  1204f5e666f21fd071dda0516ffddc11
- SHA1
  
  03e44b9f58e220aeb3415a417ea0c4a5b3c0e3a5
- SHA256
  
  a2db3a7181a95fbaa58f4dcf0e7f836755183c3e159e3a14b3f21f12d2ddfa74
- SHA512
  
  e857a3c1f5b5ff723c454117fe0a3ca3339b20a313415a72e2641aac2d7b7881b636a516d58b07fe30e6aa69557b437701372d18419dc8f941ef89f865366c79
- SSDEEP
  
  768:RSACC8BMSaIp2QRB/YDF4NIZbYmuZNnvcze:RSAqewJb0F4NIZbM/Uze
Score

7^/10

discovery
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2