de96c9810e8069c6296f0b5cb505fd3ae93b65588c9d601ae19996c9876941bd | Triage

Sharing

General

Target

235320e4d07fc4d820ee6ddc8a5185f3_JaffaCakes118
Size

1.1MB
Sample

240508-frxd2acc21
MD5

235320e4d07fc4d820ee6ddc8a5185f3
SHA1

bc9a307cda4df0de8cbe374c2c5e18d11ec2fc0a
SHA256

de96c9810e8069c6296f0b5cb505fd3ae93b65588c9d601ae19996c9876941bd
SHA512

b30bd0a5d49b0c0d820f67804b7477d790239ebf93dbe9c0bfb3cc505a19e70b3a6df9f02220b4d1c5cb0e9f3960077274c386c380e7a7f8e29c7df2cb0d2256
SSDEEP

12288:jkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQtE:jkvDp9aEvkpMasXXceQHSFD1LzXffB

Score

7^/10

Malware Config

Targets

- Target
  
  235320e4d07fc4d820ee6ddc8a5185f3_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  235320e4d07fc4d820ee6ddc8a5185f3
- SHA1
  
  bc9a307cda4df0de8cbe374c2c5e18d11ec2fc0a
- SHA256
  
  de96c9810e8069c6296f0b5cb505fd3ae93b65588c9d601ae19996c9876941bd
- SHA512
  
  b30bd0a5d49b0c0d820f67804b7477d790239ebf93dbe9c0bfb3cc505a19e70b3a6df9f02220b4d1c5cb0e9f3960077274c386c380e7a7f8e29c7df2cb0d2256
- SSDEEP
  
  12288:jkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQtE:jkvDp9aEvkpMasXXceQHSFD1LzXffB
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2