e4d7ef8d900147558f9f8781f2e800366088329aef6d5cf07809eb84de5aa79e | Triage

Sharing

General

Target

09b8bda69b9b3932b9e8969b0c8df1ac_JaffaCakes118
Size

853KB
Sample

240430-nz7tqsbf5x
MD5

09b8bda69b9b3932b9e8969b0c8df1ac
SHA1

9667e21c342c1876f5bd2cb036c7478e43796556
SHA256

e4d7ef8d900147558f9f8781f2e800366088329aef6d5cf07809eb84de5aa79e
SHA512

5ef4bc1411ca0ff87029bada101141b52e6a2ca2963354fab070490fdab36e57435dead0a6dc092859fe3a9147639909d7186f69fa4c58c4274ab4f6a87c179a
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8

Score

7^/10

Malware Config

Targets

- Target
  
  09b8bda69b9b3932b9e8969b0c8df1ac_JaffaCakes118
- Size
  
  853KB
- MD5
  
  09b8bda69b9b3932b9e8969b0c8df1ac
- SHA1
  
  9667e21c342c1876f5bd2cb036c7478e43796556
- SHA256
  
  e4d7ef8d900147558f9f8781f2e800366088329aef6d5cf07809eb84de5aa79e
- SHA512
  
  5ef4bc1411ca0ff87029bada101141b52e6a2ca2963354fab070490fdab36e57435dead0a6dc092859fe3a9147639909d7186f69fa4c58c4274ab4f6a87c179a
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2