0502754705b51cb430a2a51f5de9b9305f0dd57df993e508055d4f2d51a2f648 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa58118e4381094b5622f784bb3f9cec_JaffaCakes118
Size

709KB
Sample

240419-p7ch8sea71
MD5

fa58118e4381094b5622f784bb3f9cec
SHA1

710cf66d7d8e21bee030f08e99d3bac08c9a2139
SHA256

0502754705b51cb430a2a51f5de9b9305f0dd57df993e508055d4f2d51a2f648
SHA512

1827f2bd222442aca0f0d31c247ecce19c1f0cfe868aee01ecbd3cd06154b066e0acd8e99029c3a95da2700f397eecea23de505f251fc54799fcb46b39b4a71e
SSDEEP

12288:fokJiHbW/D4Jl85O6aP5SIPRgn2N3uceWEvV5r+2VxQhLBD6TLxrW0:fFrZXk829uce9zj4fONW0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa58118e4381094b5622f784bb3f9cec_JaffaCakes118
- Size
  
  709KB
- MD5
  
  fa58118e4381094b5622f784bb3f9cec
- SHA1
  
  710cf66d7d8e21bee030f08e99d3bac08c9a2139
- SHA256
  
  0502754705b51cb430a2a51f5de9b9305f0dd57df993e508055d4f2d51a2f648
- SHA512
  
  1827f2bd222442aca0f0d31c247ecce19c1f0cfe868aee01ecbd3cd06154b066e0acd8e99029c3a95da2700f397eecea23de505f251fc54799fcb46b39b4a71e
- SSDEEP
  
  12288:fokJiHbW/D4Jl85O6aP5SIPRgn2N3uceWEvV5r+2VxQhLBD6TLxrW0:fFrZXk829uce9zj4fONW0
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2