69dfb3b5819ebdf88879c6f7c54076944b7b17707372d09ccc7dd52da2f205ac | Triage

Sharing

General

Target

8693de18f142adc5c512a15293dbe1b0_JaffaCakes118
Size

853KB
Sample

240531-lsyalsdh2x
MD5

8693de18f142adc5c512a15293dbe1b0
SHA1

48236cade411b9c7dd8192950644266125070798
SHA256

69dfb3b5819ebdf88879c6f7c54076944b7b17707372d09ccc7dd52da2f205ac
SHA512

1ac30c1d5c0faee9d7cddf5a77d683e7d670485efe21efe519bf2997a3315a289db872ace6b427e83d96c395a0592707cd8e435e5eb0a8af9bba30000d192104
SSDEEP

24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:GqaxyDC2JmSoPvikO8

Score

7^/10

Malware Config

Targets

- Target
  
  8693de18f142adc5c512a15293dbe1b0_JaffaCakes118
- Size
  
  853KB
- MD5
  
  8693de18f142adc5c512a15293dbe1b0
- SHA1
  
  48236cade411b9c7dd8192950644266125070798
- SHA256
  
  69dfb3b5819ebdf88879c6f7c54076944b7b17707372d09ccc7dd52da2f205ac
- SHA512
  
  1ac30c1d5c0faee9d7cddf5a77d683e7d670485efe21efe519bf2997a3315a289db872ace6b427e83d96c395a0592707cd8e435e5eb0a8af9bba30000d192104
- SSDEEP
  
  24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:GqaxyDC2JmSoPvikO8
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2