f6ff0efea6cf6bd8d90c9b65c207b51254bfcb635b349649f8a9cb9d3559bce1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef6a4aaabaf46257d8466b44fa5c8a28_JaffaCakes118
Size

213KB
Sample

240921-kezqvatbqn
MD5

ef6a4aaabaf46257d8466b44fa5c8a28
SHA1

25564df197aa9d432ce13298d47383bee94d94a2
SHA256

f6ff0efea6cf6bd8d90c9b65c207b51254bfcb635b349649f8a9cb9d3559bce1
SHA512

a0fa01f9b9d47edca5d9c9e3c68f5b158fa771c02d5609e23e52ecb52bd3b804ad0110b45dfdff2e7a1edd9f8026d88b3649104a95982dc58e1dba682264bee0
SSDEEP

6144:4DYUGdf4c1uI524Roy/rxLDD9O02iXDwMI:kYUbjI52k/XDXDwMI

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  ef6a4aaabaf46257d8466b44fa5c8a28_JaffaCakes118
- Size
  
  213KB
- MD5
  
  ef6a4aaabaf46257d8466b44fa5c8a28
- SHA1
  
  25564df197aa9d432ce13298d47383bee94d94a2
- SHA256
  
  f6ff0efea6cf6bd8d90c9b65c207b51254bfcb635b349649f8a9cb9d3559bce1
- SHA512
  
  a0fa01f9b9d47edca5d9c9e3c68f5b158fa771c02d5609e23e52ecb52bd3b804ad0110b45dfdff2e7a1edd9f8026d88b3649104a95982dc58e1dba682264bee0
- SSDEEP
  
  6144:4DYUGdf4c1uI524Roy/rxLDD9O02iXDwMI:kYUbjI52k/XDXDwMI
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2