e3ae0c9b3ab1ca9d9be0e3bfe25a9281abe71e1ebf0868236be033909c2b8e16 | Triage

Sharing

General

Target

295bdca805f9762633d5e3742ef43814_JaffaCakes118
Size

25KB
Sample

241009-c56yvawbjr
MD5

295bdca805f9762633d5e3742ef43814
SHA1

72b2d6413f18d62e294a5b49453407d3d8d05f0e
SHA256

e3ae0c9b3ab1ca9d9be0e3bfe25a9281abe71e1ebf0868236be033909c2b8e16
SHA512

bbfd85a3814cf82950f9b1917037c366cb982b8af7174ed70fa6e84f3225cb145d82d738951be10054347ec12e15e624ed52a52648a1d5383d29e37e82d09dbb
SSDEEP

384:nn0ljbMQ8kptK/8UF088kqwkurGE6Rw/EX20FDJaSBdxScdKrGVoq4Bh7UH:nn0dbMQ1pIe8dB6OjqdaSjxfonK

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  295bdca805f9762633d5e3742ef43814_JaffaCakes118
- Size
  
  25KB
- MD5
  
  295bdca805f9762633d5e3742ef43814
- SHA1
  
  72b2d6413f18d62e294a5b49453407d3d8d05f0e
- SHA256
  
  e3ae0c9b3ab1ca9d9be0e3bfe25a9281abe71e1ebf0868236be033909c2b8e16
- SHA512
  
  bbfd85a3814cf82950f9b1917037c366cb982b8af7174ed70fa6e84f3225cb145d82d738951be10054347ec12e15e624ed52a52648a1d5383d29e37e82d09dbb
- SSDEEP
  
  384:nn0ljbMQ8kptK/8UF088kqwkurGE6Rw/EX20FDJaSBdxScdKrGVoq4Bh7UH:nn0dbMQ1pIe8dB6OjqdaSjxfonK
Score

5^/10

discovery
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2