02a767f4628f1f2a86ca515e5e9eb73fce76f4e08501cf4f14882ccf3c0d0d40 | Triage

Sharing

General

Target

6906b3f29d3b67626c523cefa3666140_JaffaCakes118
Size

589KB
Sample

240522-3n9arade73
MD5

6906b3f29d3b67626c523cefa3666140
SHA1

e7f5a740eb709785e57e9b4455a3d50f1a215e45
SHA256

02a767f4628f1f2a86ca515e5e9eb73fce76f4e08501cf4f14882ccf3c0d0d40
SHA512

32bc40bc9531418ce0d9b665d2fa9771151708c6bc921f46277f264a77a4adf18fd1be50e9abe606c4c0ac8c76bc84ae6976d3521d9ea77ab2de5a95ba151d90
SSDEEP

12288:i4efV5INoSUUgDp8YROY1Rxi27DuSK8p6a70RxIza/eL8bWC:ijINoSGp8kOYli27DFBIa70R3/eLsr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6906b3f29d3b67626c523cefa3666140_JaffaCakes118
- Size
  
  589KB
- MD5
  
  6906b3f29d3b67626c523cefa3666140
- SHA1
  
  e7f5a740eb709785e57e9b4455a3d50f1a215e45
- SHA256
  
  02a767f4628f1f2a86ca515e5e9eb73fce76f4e08501cf4f14882ccf3c0d0d40
- SHA512
  
  32bc40bc9531418ce0d9b665d2fa9771151708c6bc921f46277f264a77a4adf18fd1be50e9abe606c4c0ac8c76bc84ae6976d3521d9ea77ab2de5a95ba151d90
- SSDEEP
  
  12288:i4efV5INoSUUgDp8YROY1Rxi27DuSK8p6a70RxIza/eL8bWC:ijINoSGp8kOYli27DFBIa70R3/eLsr
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2