557f46f082d2841556defc8f5c4e4f13a81764e2c814865100c00ca466f7bd90 | Triage

Sharing

General

Target

ea9e1b981f96b7bc45373959cd994662_JaffaCakes118
Size

684KB
Sample

240919-fgbpkssaqq
MD5

ea9e1b981f96b7bc45373959cd994662
SHA1

549b2ba2105fbb48f98110ca5cb5c9f6413bed3f
SHA256

557f46f082d2841556defc8f5c4e4f13a81764e2c814865100c00ca466f7bd90
SHA512

7381c88d33d062edd64b04e32f678d31928d51b97034a6f2513ed0e47a793c91c646cd6099296015ee086da16796aa331c09470b5433ad8e62e77b8e4cf4373f
SSDEEP

12288:IH/vsiq5YsUgRFg2vVrUD85/GMeWuq/Sp5vT4ERnyhi/FaI0zZbl+08kDtVxrCsz:Y/vsi/sUgRFNoY+Lq/SzT/hNYZbl9Dr6

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  ea9e1b981f96b7bc45373959cd994662_JaffaCakes118
- Size
  
  684KB
- MD5
  
  ea9e1b981f96b7bc45373959cd994662
- SHA1
  
  549b2ba2105fbb48f98110ca5cb5c9f6413bed3f
- SHA256
  
  557f46f082d2841556defc8f5c4e4f13a81764e2c814865100c00ca466f7bd90
- SHA512
  
  7381c88d33d062edd64b04e32f678d31928d51b97034a6f2513ed0e47a793c91c646cd6099296015ee086da16796aa331c09470b5433ad8e62e77b8e4cf4373f
- SSDEEP
  
  12288:IH/vsiq5YsUgRFg2vVrUD85/GMeWuq/Sp5vT4ERnyhi/FaI0zZbl+08kDtVxrCsz:Y/vsi/sUgRFNoY+Lq/SzT/hNYZbl9Dr6
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2