65fe93eaa3dbb26d85c3c06d1ffbacbd6ad4a18908e847b0094122a4de7b0c7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abddc098872bc8fdf9f38a3d39377a5f_JaffaCakes118
Size

460KB
Sample

240819-vqtdbawdpe
MD5

abddc098872bc8fdf9f38a3d39377a5f
SHA1

89e705a98714d7967217dc5ad4ec30d8a006ba4a
SHA256

65fe93eaa3dbb26d85c3c06d1ffbacbd6ad4a18908e847b0094122a4de7b0c7d
SHA512

7a0a07930581bbecd62d0f3242463d4f88580ddf31db65965a095b3d31c8e6b5922f6e794c60f6593601630be816f0f3ba7e23c4762a84a2d2c7933ae0b55526
SSDEEP

12288:dyHbdTTyXA8xtXD52p7kcTo3HD2iZ65VLF0ZIv7wGMcNQ7:MTylnXDghkcTViZ6Lyt

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  abddc098872bc8fdf9f38a3d39377a5f_JaffaCakes118
- Size
  
  460KB
- MD5
  
  abddc098872bc8fdf9f38a3d39377a5f
- SHA1
  
  89e705a98714d7967217dc5ad4ec30d8a006ba4a
- SHA256
  
  65fe93eaa3dbb26d85c3c06d1ffbacbd6ad4a18908e847b0094122a4de7b0c7d
- SHA512
  
  7a0a07930581bbecd62d0f3242463d4f88580ddf31db65965a095b3d31c8e6b5922f6e794c60f6593601630be816f0f3ba7e23c4762a84a2d2c7933ae0b55526
- SSDEEP
  
  12288:dyHbdTTyXA8xtXD52p7kcTo3HD2iZ65VLF0ZIv7wGMcNQ7:MTylnXDghkcTViZ6Lyt
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2