c9ab0f2bc4a9dd7eeaa2ce1201b5c41a6544518df2b782a7d0fb275e43f433d0 | Triage

Sharing

General

Target

18532e0a157eca70ae3b54822be7ff3c_JaffaCakes118
Size

402KB
Sample

241006-q1dy6a1eka
MD5

18532e0a157eca70ae3b54822be7ff3c
SHA1

d1a14c14492aef13fc4dcd2682f5b890ee6f8a35
SHA256

c9ab0f2bc4a9dd7eeaa2ce1201b5c41a6544518df2b782a7d0fb275e43f433d0
SHA512

99b7e2979e680ec639a41844d74936baf4e86ea20a5592789de6b6d00c23033e9a207c393970c33a5932464277840afa2f52fca2ab4212cc991b72dd37d91f28
SSDEEP

6144:+Lcvcl4EMB02zlsExt7eAz5ldW/JGdIEFQyX0rsbtEw/0xcA6bZm7:d0l4tq2z+ExtL1WQIEFtTA0Zc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  18532e0a157eca70ae3b54822be7ff3c_JaffaCakes118
- Size
  
  402KB
- MD5
  
  18532e0a157eca70ae3b54822be7ff3c
- SHA1
  
  d1a14c14492aef13fc4dcd2682f5b890ee6f8a35
- SHA256
  
  c9ab0f2bc4a9dd7eeaa2ce1201b5c41a6544518df2b782a7d0fb275e43f433d0
- SHA512
  
  99b7e2979e680ec639a41844d74936baf4e86ea20a5592789de6b6d00c23033e9a207c393970c33a5932464277840afa2f52fca2ab4212cc991b72dd37d91f28
- SSDEEP
  
  6144:+Lcvcl4EMB02zlsExt7eAz5ldW/JGdIEFQyX0rsbtEw/0xcA6bZm7:d0l4tq2z+ExtL1WQIEFtTA0Zc
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2