Overview

overview

6

Static

static

3

Rage+18Tr-...NG.exe

windows7-x64

5

Rage+18Tr-...NG.exe

windows10-2004-x64

6

�...ru.url

windows7-x64

1

�...ru.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea7d36104e09b69ef651ba4c6c8d970d_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240919-dwc5vaydmm

  • MD5

    ea7d36104e09b69ef651ba4c6c8d970d

  • SHA1

    b716fdca2e85edd5f5569d7b8d4a1dbc3f1e9cde

  • SHA256

    beb8eef94b46c89af5b64a93a2bbaaccd696427f2cbd4a1c9d26f96c83db1e14

  • SHA512

    a3cea27704382c647de7103ea1430534deb47ecf855877bc098f87ebeb578eedb1c79a1fd9acf5bc7c92bec972391ca41a740639d1fbea836c0fcae430a67ffb

  • SSDEEP

    49152:S8iExV5hhnnSjgPU9Q4SlyGszne0mbqvylLYGnRq/GANF92mVnCnzUpc:SjExv8iU9Q4Slyr60S9nQjnCQpc

Score
6/10
discovery

Malware Config

Targets

    • Target

      Rage+18Tr-LNG/Rage+18Tr-LNG.exe

    • Size

      2.3MB

    • MD5

      ecbaa9e340e4732584980431845629ab

    • SHA1

      8d6152be2110f0dd020234b728c1c2ccf54f3c36

    • SHA256

      5043feadfe5e2270fa07e8021b8175ec5a39670c78e575e83c99c5bc878cbb67

    • SHA512

      7d98575e65c6459e8fbdb9f08769ffaf31260a93c6825c64d93893266f51a46eca94a6f0776d80f0741b4c15234e2962f55d01c5b14eff6bc9e850110c11cebb

    • SSDEEP

      49152:x8iExV5hhnnSjgPU9Q4SlyGszne0mbqvylLYGnRq/GANF92mVnCnzUp:xjExv8iU9Q4Slyr60S9nQjnCQp

    Score
    6/10
    discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

       ᪠砭  ᠩ PlayGround.ru.url

    • Size

      175B

    • MD5

      fd52b799d647b31adb75d398cb3bdc1f

    • SHA1

      38fcaf023f1b2e896e9356b4033582b1094ffbc3

    • SHA256

      5f8155e67923ce0e50733c257ee5b6276b5c77e65627d5c51f85c7408e7847a2

    • SHA512

      a131716612b4170dfe570200569eb01c69ed810c7c14a16ad34ff3b94bafc19cfb7111c7f17cda852d783f68a1d2ca50471badcd2add869075bd8190b380f4cc

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks