1460600123e8ef49e2116971e683ef9cac2e71162aba1c5982f3cc475baa41b5 | Triage

Sharing

General

Target

7b89436aa2bbf168fdc53ea34f6df9fb_JaffaCakes118
Size

1.1MB
Sample

240528-dzmhpada5z
MD5

7b89436aa2bbf168fdc53ea34f6df9fb
SHA1

8e95097f84bbb623e90055371557e5ee352a7a4b
SHA256

1460600123e8ef49e2116971e683ef9cac2e71162aba1c5982f3cc475baa41b5
SHA512

a6f0acfb3d224a7fa5246e38045d59e61e235ffb2de84683d4028820da6fce9d7bfc962e7609cf8aee13d212fcff58714d0bb1a161e57068346b6ad467a752be
SSDEEP

24576:aMjtdFF1r7tQLf/9fOeEfJkgvvEEWhtkk9vrin6:FjtHf1oJA1iWyvrV

Score

7^/10

Malware Config

Targets

- Target
  
  7b89436aa2bbf168fdc53ea34f6df9fb_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  7b89436aa2bbf168fdc53ea34f6df9fb
- SHA1
  
  8e95097f84bbb623e90055371557e5ee352a7a4b
- SHA256
  
  1460600123e8ef49e2116971e683ef9cac2e71162aba1c5982f3cc475baa41b5
- SHA512
  
  a6f0acfb3d224a7fa5246e38045d59e61e235ffb2de84683d4028820da6fce9d7bfc962e7609cf8aee13d212fcff58714d0bb1a161e57068346b6ad467a752be
- SSDEEP
  
  24576:aMjtdFF1r7tQLf/9fOeEfJkgvvEEWhtkk9vrin6:FjtHf1oJA1iWyvrV
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2