1552c09bbb38444a6e88dd8606cadd4d66644da0abfb916dcd73c91b098d5ad0 | Triage

Sharing

General

Target

638c6b56a5fc1fd333ebc0a759a6234d_JaffaCakes118
Size

570KB
Sample

240521-rc3haage35
MD5

638c6b56a5fc1fd333ebc0a759a6234d
SHA1

8b78c9e27ede5a1712dc52c38e4662c0552f2328
SHA256

1552c09bbb38444a6e88dd8606cadd4d66644da0abfb916dcd73c91b098d5ad0
SHA512

ba553ef6bea601ca041afd5baa29bbafc26f5f363b98cf00f850f884eb9b66071fa5e934881ae97430c7940011100129705435dd71abd0ef6d2e0d683f05d12b
SSDEEP

12288:cJtxXpzNquXxf52Tp48Dskkl/nmXqY7EglxLthdM7W3vDbj:gt7JDB52lf3w+XqY7NlZdiij

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  638c6b56a5fc1fd333ebc0a759a6234d_JaffaCakes118
- Size
  
  570KB
- MD5
  
  638c6b56a5fc1fd333ebc0a759a6234d
- SHA1
  
  8b78c9e27ede5a1712dc52c38e4662c0552f2328
- SHA256
  
  1552c09bbb38444a6e88dd8606cadd4d66644da0abfb916dcd73c91b098d5ad0
- SHA512
  
  ba553ef6bea601ca041afd5baa29bbafc26f5f363b98cf00f850f884eb9b66071fa5e934881ae97430c7940011100129705435dd71abd0ef6d2e0d683f05d12b
- SSDEEP
  
  12288:cJtxXpzNquXxf52Tp48Dskkl/nmXqY7EglxLthdM7W3vDbj:gt7JDB52lf3w+XqY7NlZdiij
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2