34a436227589ebe1a2b673d8ced9b9882cc6a0271a0e74bd771e0464a3d39ab0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6804eb69aaa8cf722814d2d2067749fc_JaffaCakes118
Size

570KB
Sample

240522-vwtk9sac86
MD5

6804eb69aaa8cf722814d2d2067749fc
SHA1

db7a3ef7eb27659a4c72a8c388421463625dfb2a
SHA256

34a436227589ebe1a2b673d8ced9b9882cc6a0271a0e74bd771e0464a3d39ab0
SHA512

fac33aaf2aa6014b35546b78a27478fe7551f1061f27ad6ef20a1ea4172f5435bef4bada935594628a40fa8a1be640940f19ebbe97430a97d9d95f42757bbfa3
SSDEEP

12288:U1khEYGha2bqs/zdSPe5h8yaoTmXAdyBmzErRcNW+6y7vkk:U1gr2n/zdSzGTmw8ozWr+6E8k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6804eb69aaa8cf722814d2d2067749fc_JaffaCakes118
- Size
  
  570KB
- MD5
  
  6804eb69aaa8cf722814d2d2067749fc
- SHA1
  
  db7a3ef7eb27659a4c72a8c388421463625dfb2a
- SHA256
  
  34a436227589ebe1a2b673d8ced9b9882cc6a0271a0e74bd771e0464a3d39ab0
- SHA512
  
  fac33aaf2aa6014b35546b78a27478fe7551f1061f27ad6ef20a1ea4172f5435bef4bada935594628a40fa8a1be640940f19ebbe97430a97d9d95f42757bbfa3
- SSDEEP
  
  12288:U1khEYGha2bqs/zdSPe5h8yaoTmXAdyBmzErRcNW+6y7vkk:U1gr2n/zdSzGTmw8ozWr+6E8k
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2