1349c389b659b206353005eae19fb1268ad69699c0dc937c2ce0c913a8a3801a | Triage

Sharing

General

Target

13bc010090c297535e620953415dfcb9_JaffaCakes118
Size

578KB
Sample

240504-vygdqafd58
MD5

13bc010090c297535e620953415dfcb9
SHA1

52c5ff57ab020212eec4330c006b0f2b8c72db7e
SHA256

1349c389b659b206353005eae19fb1268ad69699c0dc937c2ce0c913a8a3801a
SHA512

93e95136e9efa83b0cff8a607d0a05c551dcea8d522f12168d5f9501ba12f0188e93b01d22598a51f13428ac5ab23dde1952f1432e6f507b1e6bcb9baa1dd281
SSDEEP

12288:NPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0:9KN+qlYKjVz00rYiMd8z3vmsuSPc0R0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  13bc010090c297535e620953415dfcb9_JaffaCakes118
- Size
  
  578KB
- MD5
  
  13bc010090c297535e620953415dfcb9
- SHA1
  
  52c5ff57ab020212eec4330c006b0f2b8c72db7e
- SHA256
  
  1349c389b659b206353005eae19fb1268ad69699c0dc937c2ce0c913a8a3801a
- SHA512
  
  93e95136e9efa83b0cff8a607d0a05c551dcea8d522f12168d5f9501ba12f0188e93b01d22598a51f13428ac5ab23dde1952f1432e6f507b1e6bcb9baa1dd281
- SSDEEP
  
  12288:NPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0:9KN+qlYKjVz00rYiMd8z3vmsuSPc0R0
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2