General

  • Target

    73e634d0387beef436f0118861063902_JaffaCakes118

  • Size

    242KB

  • Sample

    240726-nswg5avgml

  • MD5

    73e634d0387beef436f0118861063902

  • SHA1

    3d38dd22e36ed2052e8d6bb6e22972e46778ae30

  • SHA256

    fb607900da40619f75085449b759b33bba06e3b056a7119ab8f7e73b748ea922

  • SHA512

    9938305cedab4b320afa8bf287a0ab0290d5eaef3e82e6533db5303afae5151509d8f738e1b5664a42d2699e81b471112fb4cae854b81b8bddf0f911c13cd22b

  • SSDEEP

    6144:N5gBhONE329bPm9GssDB0UxZXCfhcZQZRN:NKBqE3euOtHxZghDZD

Score
7/10

Malware Config

Targets

    • Target

      73e634d0387beef436f0118861063902_JaffaCakes118

    • Size

      242KB

    • MD5

      73e634d0387beef436f0118861063902

    • SHA1

      3d38dd22e36ed2052e8d6bb6e22972e46778ae30

    • SHA256

      fb607900da40619f75085449b759b33bba06e3b056a7119ab8f7e73b748ea922

    • SHA512

      9938305cedab4b320afa8bf287a0ab0290d5eaef3e82e6533db5303afae5151509d8f738e1b5664a42d2699e81b471112fb4cae854b81b8bddf0f911c13cd22b

    • SSDEEP

      6144:N5gBhONE329bPm9GssDB0UxZXCfhcZQZRN:NKBqE3euOtHxZghDZD

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks