520e03754bb0a5febe916a2d700fe3267548e1efc70e252d974326b3ab4d0d11 | Triage

Sharing

General

Target

69253ab26a7f5c79cb292a82ee3eb59b_JaffaCakes118
Size

689KB
Sample

240523-asyetseh76
MD5

69253ab26a7f5c79cb292a82ee3eb59b
SHA1

50e860e691e9f4d33a119c5a054e4c460e895cdf
SHA256

520e03754bb0a5febe916a2d700fe3267548e1efc70e252d974326b3ab4d0d11
SHA512

e821bb0e008d94ece575af1393134bb66429f0b42fe924a98269ce9608b44e40bfffe9e8c4bb45f240623d816fac8fe0ed223e25ffaacf6d32341409fa777012
SSDEEP

12288:rMGU99p82TL5WXv0Be53AXTNMwmTfumY+7rP8db1+Q/WCjVF6WjXKSa:Az99pU0Be5wXTNMwmT0+7wf9WcVdXKP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  69253ab26a7f5c79cb292a82ee3eb59b_JaffaCakes118
- Size
  
  689KB
- MD5
  
  69253ab26a7f5c79cb292a82ee3eb59b
- SHA1
  
  50e860e691e9f4d33a119c5a054e4c460e895cdf
- SHA256
  
  520e03754bb0a5febe916a2d700fe3267548e1efc70e252d974326b3ab4d0d11
- SHA512
  
  e821bb0e008d94ece575af1393134bb66429f0b42fe924a98269ce9608b44e40bfffe9e8c4bb45f240623d816fac8fe0ed223e25ffaacf6d32341409fa777012
- SSDEEP
  
  12288:rMGU99p82TL5WXv0Be53AXTNMwmTfumY+7rP8db1+Q/WCjVF6WjXKSa:Az99pU0Be5wXTNMwmT0+7wf9WcVdXKP
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Peripheral Device Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2