48a6f842d35cb03c3d722f78bfe29ce24fd3ecc58b2fdebf1fdaf50a654c0dc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72b8f9bc733b89de8e4b3f8575ab9838_JaffaCakes118
Size

2.3MB
Sample

240726-fyspes1gqb
MD5

72b8f9bc733b89de8e4b3f8575ab9838
SHA1

8d1cf6ab7ddcb5b2b1b32f4769d4433c3c140462
SHA256

48a6f842d35cb03c3d722f78bfe29ce24fd3ecc58b2fdebf1fdaf50a654c0dc5
SHA512

cbdd7e2b2e3f596511acaea6e55db2db2594c1f368a93e366a5c95530c4f0bde29a206e282d64cb29d431eb8bdafe294c592ed8dfab2b77de84377f8a0825dcf
SSDEEP

49152:zSuzVSYP1tEslDQqbW5TQAG7rQwdbLurX6n2vEvD3bwuNT:2uzAYIWTbW6nQwdNvXwuNT

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  72b8f9bc733b89de8e4b3f8575ab9838_JaffaCakes118
- Size
  
  2.3MB
- MD5
  
  72b8f9bc733b89de8e4b3f8575ab9838
- SHA1
  
  8d1cf6ab7ddcb5b2b1b32f4769d4433c3c140462
- SHA256
  
  48a6f842d35cb03c3d722f78bfe29ce24fd3ecc58b2fdebf1fdaf50a654c0dc5
- SHA512
  
  cbdd7e2b2e3f596511acaea6e55db2db2594c1f368a93e366a5c95530c4f0bde29a206e282d64cb29d431eb8bdafe294c592ed8dfab2b77de84377f8a0825dcf
- SSDEEP
  
  49152:zSuzVSYP1tEslDQqbW5TQAG7rQwdbLurX6n2vEvD3bwuNT:2uzAYIWTbW6nQwdNvXwuNT
Score

8^/10

discovery
- Drops file in Drivers directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2