General

  • Target

    084de9e4383bc9247c733faded7c54e6_JaffaCakes118

  • Size

    2.2MB

  • Sample

    241002-b5gtaa1dkp

  • MD5

    084de9e4383bc9247c733faded7c54e6

  • SHA1

    ecfcca63515dfca568dc6fc42de4fe3000eb7503

  • SHA256

    442c0032f357020f95d9587d85d1983f838e53475b18c79b61b76f790ff9d12a

  • SHA512

    9b6a216bff29dad37c5e9d4130abff052ee36c64d3d2e4b17122ca57469b98b51a15fa83cfcd6e7639e43109d73559688116ce2966ea4183981c929f03681dd3

  • SSDEEP

    49152:JM/uGwjz0keUJkGsD8H1vm+IK85qDnmQu2XUbK/fqz38FDHf6D:JQubSUJkG7Vvm+Juqb9u2XaK3qr4+D

Score
6/10

Malware Config

Targets

    • Target

      ALI213-SaintsRIV.11Tr.LNG.v1.0/SaintsRIV+11Tr-LNG_v1.0.exe

    • Size

      2.3MB

    • MD5

      4f4221f2347f1abe30b43d09c9167f28

    • SHA1

      e8b655e979d532cfb8fa88bd0cb210aca6bc6a01

    • SHA256

      5ccae25f0a50a8ea380dfadfbbf2f54c13b30ac41eb9d12635898295cd3d93f5

    • SHA512

      ffb69f7c82d2306f894cde79cc50588b45a6fd8b33ea2b745c734ed458c8b5809b31f71e19c5bed6270a92e0429e7975a22d61927919720518d9605788424e5b

    • SSDEEP

      49152:A/1P5hTnpAWDM2MMMAIwC+TaMFsjeZdtVON7Rapv98Ct2U7CcKNpi+3Sq:A/1RLAWDMbMMF9+TaMFsjKdHObKqCcP9

    Score
    6/10
    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      Readme-说明.html

    • Size

      777B

    • MD5

      c958a387bcb4d4c4c36ed2dec01184e0

    • SHA1

      910f0ed80eed8c34967b4c888fed20f776436fbb

    • SHA256

      f99a90d3cb21afed0ad2fccc9bac2829d4f3ad8ef9041cca405117398c43c57d

    • SHA512

      ee2a93c89c3474cd112d3585b1ba1d6d0cd48982562da0033d2570f2def91e1daa2ff83d41a6c1731c4595264f79be12ff596d76e2130e88051d268dc0ed99d4

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks