2501ea8fbea9231d3bdb51f76801cafa8dbbc0468954d583384e4ce18307e04b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8896b28c9ad28ebb619be7e2e118e9_JaffaCakes118
Size

185KB
Sample

240820-rhfwgazdpp
MD5

af8896b28c9ad28ebb619be7e2e118e9
SHA1

c053418160c450c351988df72fc582130bf3452c
SHA256

2501ea8fbea9231d3bdb51f76801cafa8dbbc0468954d583384e4ce18307e04b
SHA512

5857de3ab446b009a6a320554576233198dcd99be29871ab8988cdf2ea9dc475728904d4b8b1118d5dde131acf09a5fee315067a1653d489ad937e02e99d3b26
SSDEEP

3072:52LicRTbPunYpJMRRsk4+ZuLPPZTtEZAtUV1IW53baG4lP+g3UDLY6C+E6ABsbkV:4LXRnjcuzRtEZQ1i4lPXU9phtk

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  af8896b28c9ad28ebb619be7e2e118e9_JaffaCakes118
- Size
  
  185KB
- MD5
  
  af8896b28c9ad28ebb619be7e2e118e9
- SHA1
  
  c053418160c450c351988df72fc582130bf3452c
- SHA256
  
  2501ea8fbea9231d3bdb51f76801cafa8dbbc0468954d583384e4ce18307e04b
- SHA512
  
  5857de3ab446b009a6a320554576233198dcd99be29871ab8988cdf2ea9dc475728904d4b8b1118d5dde131acf09a5fee315067a1653d489ad937e02e99d3b26
- SSDEEP
  
  3072:52LicRTbPunYpJMRRsk4+ZuLPPZTtEZAtUV1IW53baG4lP+g3UDLY6C+E6ABsbkV:4LXRnjcuzRtEZQ1i4lPXU9phtk
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2