12c765cd6b51d41bd08446bdfb1ef3ccb8c17be22b0df99310421836bb443d07 | Triage

Sharing

General

Target

321d815c12632258be475ed333788872_JaffaCakes118
Size

585KB
Sample

240511-b9sfksef6t
MD5

321d815c12632258be475ed333788872
SHA1

e46d5a5021bfd69f889c4324643c2d200628d796
SHA256

12c765cd6b51d41bd08446bdfb1ef3ccb8c17be22b0df99310421836bb443d07
SHA512

6b5a81fa66806c5467fd723bb0c5cf30790cd6bc875c315bc48be43d3caa49df940111922082b2a027ecda32c949c8c8ebef785c5660095dbf38d6485217f1cf
SSDEEP

12288:vXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jj:igIh0/iLhrekeKYAl4RNj

Score

7^/10

Malware Config

Targets

- Target
  
  321d815c12632258be475ed333788872_JaffaCakes118
- Size
  
  585KB
- MD5
  
  321d815c12632258be475ed333788872
- SHA1
  
  e46d5a5021bfd69f889c4324643c2d200628d796
- SHA256
  
  12c765cd6b51d41bd08446bdfb1ef3ccb8c17be22b0df99310421836bb443d07
- SHA512
  
  6b5a81fa66806c5467fd723bb0c5cf30790cd6bc875c315bc48be43d3caa49df940111922082b2a027ecda32c949c8c8ebef785c5660095dbf38d6485217f1cf
- SSDEEP
  
  12288:vXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jj:igIh0/iLhrekeKYAl4RNj
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2