1914b9945eed542254601b3564144bc6920701fdb8ba41a9ba6a71eb4dd6d5ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6aef44ff00ad694bd38f9d30956709_JaffaCakes118
Size

1.1MB
Sample

240501-v6vajsee65
MD5

0c6aef44ff00ad694bd38f9d30956709
SHA1

55336e708edfc7d47fe3d7288a4f1d389239bcd0
SHA256

1914b9945eed542254601b3564144bc6920701fdb8ba41a9ba6a71eb4dd6d5ac
SHA512

113763bea825f5a0ba58572c7133783d9ddd5147ba5ab8d0225c19c6326269ddbd91b24b8cddbea40b1a6e2c5669ca609d74bf2011249d8d7e241b0a124020e7
SSDEEP

12288:jkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQt2:jkvDp9aEvkpMasXXceQHSFD1LzXffBt

Score

7^/10

Malware Config

Targets

- Target
  
  0c6aef44ff00ad694bd38f9d30956709_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  0c6aef44ff00ad694bd38f9d30956709
- SHA1
  
  55336e708edfc7d47fe3d7288a4f1d389239bcd0
- SHA256
  
  1914b9945eed542254601b3564144bc6920701fdb8ba41a9ba6a71eb4dd6d5ac
- SHA512
  
  113763bea825f5a0ba58572c7133783d9ddd5147ba5ab8d0225c19c6326269ddbd91b24b8cddbea40b1a6e2c5669ca609d74bf2011249d8d7e241b0a124020e7
- SSDEEP
  
  12288:jkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQt2:jkvDp9aEvkpMasXXceQHSFD1LzXffBt
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2