ad055167a7590e97b6c122f0f73618a5a8277ad0bc2b6b69bb6164fe0aef170d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7f04f9b27479aee824ee52d65c59fbb_JaffaCakes118
Size

26KB
Sample

240829-a2lsdsvdqh
MD5

c7f04f9b27479aee824ee52d65c59fbb
SHA1

a6f79d0e615e46c2cb73f1f23fd866fd0fb49d92
SHA256

ad055167a7590e97b6c122f0f73618a5a8277ad0bc2b6b69bb6164fe0aef170d
SHA512

7ab7ba25be53ad27a947d95d9e587b36f57dd5f628c8a890bc0e415e50066c1a152073b8310e80b64a44422994b24c407982260a9718eb8dd52badc4642e6ae1
SSDEEP

768:NlJbAWrCq90IkYkZ72pHggxs+WTbhofRvwnL:NlJbvWlYklQHgMsmCL

Score

7^/10

defense_evasion discovery privilege_escalation

Malware Config

Targets

- Target
  
  c7f04f9b27479aee824ee52d65c59fbb_JaffaCakes118
- Size
  
  26KB
- MD5
  
  c7f04f9b27479aee824ee52d65c59fbb
- SHA1
  
  a6f79d0e615e46c2cb73f1f23fd866fd0fb49d92
- SHA256
  
  ad055167a7590e97b6c122f0f73618a5a8277ad0bc2b6b69bb6164fe0aef170d
- SHA512
  
  7ab7ba25be53ad27a947d95d9e587b36f57dd5f628c8a890bc0e415e50066c1a152073b8310e80b64a44422994b24c407982260a9718eb8dd52badc4642e6ae1
- SSDEEP
  
  768:NlJbAWrCq90IkYkZ72pHggxs+WTbhofRvwnL:NlJbvWlYklQHgMsmCL
Score

7^/10

defense_evasion discovery privilege_escalation
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryprivilege_escalation

behavioral2

defense_evasiondiscoveryprivilege_escalation