a45eab9062c0052957f4badd28e9bbbb1d7b102fbfacecb800d658b3baa5d5d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd111c9e81ef52c9a57f3466b4fec23_JaffaCakes118
Size

128KB
Sample

240913-grq3paxgrq
MD5

ddd111c9e81ef52c9a57f3466b4fec23
SHA1

9e391c8a69b100ecf8898e8c829f2e60510613c9
SHA256

a45eab9062c0052957f4badd28e9bbbb1d7b102fbfacecb800d658b3baa5d5d0
SHA512

5f8854db5096fa27c53f12d09cec2dad144a975f71f6b4159a5467b7927688a74879282551c7b111c0c2587ad0f25659c64ced47f4dcb288570b7e3ae646b7f8
SSDEEP

3072:h+mODtUbnu97OjKkFt8n8eVOQ7gUasHZSEpNMONUHQN:QmODtUGOZY8eVFOOMOmHQN

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  ddd111c9e81ef52c9a57f3466b4fec23_JaffaCakes118
- Size
  
  128KB
- MD5
  
  ddd111c9e81ef52c9a57f3466b4fec23
- SHA1
  
  9e391c8a69b100ecf8898e8c829f2e60510613c9
- SHA256
  
  a45eab9062c0052957f4badd28e9bbbb1d7b102fbfacecb800d658b3baa5d5d0
- SHA512
  
  5f8854db5096fa27c53f12d09cec2dad144a975f71f6b4159a5467b7927688a74879282551c7b111c0c2587ad0f25659c64ced47f4dcb288570b7e3ae646b7f8
- SSDEEP
  
  3072:h+mODtUbnu97OjKkFt8n8eVOQ7gUasHZSEpNMONUHQN:QmODtUGOZY8eVFOOMOmHQN
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2