aaf09f50cc905edc7215d9dff4039537b8fbf65f003a62be7221babbf074c099 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dbe4af13a97c545addeb6157d8e52c7_JaffaCakes118
Size

175KB
Sample

241013-ewv64ayerh
MD5

3dbe4af13a97c545addeb6157d8e52c7
SHA1

84c6254e624f4ced75cc565fefffdf6a99f192ab
SHA256

aaf09f50cc905edc7215d9dff4039537b8fbf65f003a62be7221babbf074c099
SHA512

1515ac38ff594deac6d9e3a0149f28ea631f98a9887eaa26135c8bd33daa68ce01945d8d903ec4442a37a2616996f13be8b05c7b0847f61d7ac561e977ed97b0
SSDEEP

3072:di63LBbFIoloOH7bXxMbNB7QiFpjEAHklov+ITwgkBnfbq6Tw7DvacHRDU3y:HVPPbhiNBLXjEh+DP6I/P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3dbe4af13a97c545addeb6157d8e52c7_JaffaCakes118
- Size
  
  175KB
- MD5
  
  3dbe4af13a97c545addeb6157d8e52c7
- SHA1
  
  84c6254e624f4ced75cc565fefffdf6a99f192ab
- SHA256
  
  aaf09f50cc905edc7215d9dff4039537b8fbf65f003a62be7221babbf074c099
- SHA512
  
  1515ac38ff594deac6d9e3a0149f28ea631f98a9887eaa26135c8bd33daa68ce01945d8d903ec4442a37a2616996f13be8b05c7b0847f61d7ac561e977ed97b0
- SSDEEP
  
  3072:di63LBbFIoloOH7bXxMbNB7QiFpjEAHklov+ITwgkBnfbq6Tw7DvacHRDU3y:HVPPbhiNBLXjEh+DP6I/P
Score

7^/10

discovery
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2