26a62ba2b11d942bd9c79e8414edb3824616212f110cca77e539b49c4bb79e13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdea2f40f95ccf1ea4d20233b5c7d865_JaffaCakes118
Size

619KB
Sample

240929-gkl56asapn
MD5

fdea2f40f95ccf1ea4d20233b5c7d865
SHA1

ed670b8af3cc8c4c80b168ca749d77c73812f499
SHA256

26a62ba2b11d942bd9c79e8414edb3824616212f110cca77e539b49c4bb79e13
SHA512

e93ba1168ec4ab3aae219620c36bbf6fb8135d5b3d437ac2ea0849046e1dbd4d04cf8cc4e8ac24ef092d9bc333da63301494980debd867924143c62a62d6a632
SSDEEP

12288:1o7YNQNBeW8/LViyIakQz15bbPUt4un4fQsoItQjUpbH9D/kKjYv:2wQwiyIakELMv4Fo0nXw

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  fdea2f40f95ccf1ea4d20233b5c7d865_JaffaCakes118
- Size
  
  619KB
- MD5
  
  fdea2f40f95ccf1ea4d20233b5c7d865
- SHA1
  
  ed670b8af3cc8c4c80b168ca749d77c73812f499
- SHA256
  
  26a62ba2b11d942bd9c79e8414edb3824616212f110cca77e539b49c4bb79e13
- SHA512
  
  e93ba1168ec4ab3aae219620c36bbf6fb8135d5b3d437ac2ea0849046e1dbd4d04cf8cc4e8ac24ef092d9bc333da63301494980debd867924143c62a62d6a632
- SSDEEP
  
  12288:1o7YNQNBeW8/LViyIakQz15bbPUt4un4fQsoItQjUpbH9D/kKjYv:2wQwiyIakELMv4Fo0nXw
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2