39e26faac0e1ab9f36d3fe5db9ac5fa90717ee10320b908f9399e696bcb7ec4e | Triage

Sharing

General

Target

d484e82113e75a04ab6799fa7313437d_JaffaCakes118
Size

968KB
Sample

240908-q9h98szcln
MD5

d484e82113e75a04ab6799fa7313437d
SHA1

c7a79cc6c54c781e6bdd2da487d62938aa41fd54
SHA256

39e26faac0e1ab9f36d3fe5db9ac5fa90717ee10320b908f9399e696bcb7ec4e
SHA512

40988b9347632df02911494f93554712c26b27519349c0501b5c176678a589e1f4d29134dc952332b1aad33d47d3078fb4b43c06b3b53d91afe9af22846c8f09
SSDEEP

12288:X/id61xBAh81PL3NHFakaq0uq2XF/1kaA0Y1Y:KyLTVFbFvBbm0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d484e82113e75a04ab6799fa7313437d_JaffaCakes118
- Size
  
  968KB
- MD5
  
  d484e82113e75a04ab6799fa7313437d
- SHA1
  
  c7a79cc6c54c781e6bdd2da487d62938aa41fd54
- SHA256
  
  39e26faac0e1ab9f36d3fe5db9ac5fa90717ee10320b908f9399e696bcb7ec4e
- SHA512
  
  40988b9347632df02911494f93554712c26b27519349c0501b5c176678a589e1f4d29134dc952332b1aad33d47d3078fb4b43c06b3b53d91afe9af22846c8f09
- SSDEEP
  
  12288:X/id61xBAh81PL3NHFakaq0uq2XF/1kaA0Y1Y:KyLTVFbFvBbm0
Score

7^/10

discovery
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2