43dc2188d32e56ea3c956010b08b5cdbb4561b682c4054ff3760c66e3427c3d0 | Triage

Sharing

General

Target

8bc96ca31a9e16e4a35fe51cbcc6ada8_JaffaCakes118
Size

1.4MB
Sample

240601-zyqplsfg52
MD5

8bc96ca31a9e16e4a35fe51cbcc6ada8
SHA1

6df34aba39bff398e569f92ac53a45cdfb6fe1dc
SHA256

43dc2188d32e56ea3c956010b08b5cdbb4561b682c4054ff3760c66e3427c3d0
SHA512

9a0697400bb0f7db21896f0137ec0883cbd8d7c60222973dc99ddf858d325306123fed0609e2d1a4fbe26aed5832c32dff0588b3990fc7577b08f8b367419dec
SSDEEP

24576:BROIXXWO23lN/OVx/SdsWpqU5fK5IEAV8FojIRg4n9HQrOhU:BMInWVFm/S5qhc8FoMV9/hU

Score

7^/10

Malware Config

Targets

- Target
  
  8bc96ca31a9e16e4a35fe51cbcc6ada8_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  8bc96ca31a9e16e4a35fe51cbcc6ada8
- SHA1
  
  6df34aba39bff398e569f92ac53a45cdfb6fe1dc
- SHA256
  
  43dc2188d32e56ea3c956010b08b5cdbb4561b682c4054ff3760c66e3427c3d0
- SHA512
  
  9a0697400bb0f7db21896f0137ec0883cbd8d7c60222973dc99ddf858d325306123fed0609e2d1a4fbe26aed5832c32dff0588b3990fc7577b08f8b367419dec
- SSDEEP
  
  24576:BROIXXWO23lN/OVx/SdsWpqU5fK5IEAV8FojIRg4n9HQrOhU:BMInWVFm/S5qhc8FoMV9/hU
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2