General

  • Target

    36b1851edfdb0f279c3e352ba06a3c44_JaffaCakes118

  • Size

    26KB

  • Sample

    240710-2myxyswgmg

  • MD5

    36b1851edfdb0f279c3e352ba06a3c44

  • SHA1

    7a9bee1318ee88b70bdc35330ad708226434660e

  • SHA256

    f7edb5c3fa2b0662d25b15c2814244b448729bba23afdf4d336a3acc4b5113ae

  • SHA512

    f68b792d42145de38e9e5b3044caa308927d2ff69ec2ce665cc915ef70e343da19ccc590b2ad00e3f7b2473c3ad3bb203529c3b83b2c28934e1863e79ecbf2c4

  • SSDEEP

    768:qru9I+eKJx3EzRroMYoKxyVhJQKBIN5/OvTvL:qrubMY6J/KervL

Malware Config

Targets

    • Target

      36b1851edfdb0f279c3e352ba06a3c44_JaffaCakes118

    • Size

      26KB

    • MD5

      36b1851edfdb0f279c3e352ba06a3c44

    • SHA1

      7a9bee1318ee88b70bdc35330ad708226434660e

    • SHA256

      f7edb5c3fa2b0662d25b15c2814244b448729bba23afdf4d336a3acc4b5113ae

    • SHA512

      f68b792d42145de38e9e5b3044caa308927d2ff69ec2ce665cc915ef70e343da19ccc590b2ad00e3f7b2473c3ad3bb203529c3b83b2c28934e1863e79ecbf2c4

    • SSDEEP

      768:qru9I+eKJx3EzRroMYoKxyVhJQKBIN5/OvTvL:qrubMY6J/KervL

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks