24953ab5cf85e2d1980a97027473fe62e0eb009aa0f72405c99498872349f8ed | Triage

Sharing

General

Target

97dca712c5d9c57617f3ce8df99299b8_JaffaCakes118
Size

581KB
Sample

240605-mhlphada3w
MD5

97dca712c5d9c57617f3ce8df99299b8
SHA1

78a5d16cf89944bdbf2e61712981e59a4ce8552d
SHA256

24953ab5cf85e2d1980a97027473fe62e0eb009aa0f72405c99498872349f8ed
SHA512

6a2d1c200f5d9dc8e8eb88d626427eb943211de08504540c968f917ffcd436a9ae8181acfc8fec234bcc550e5e925ede9cabc08a9f6bf61d2ee70d1aa71122d5
SSDEEP

12288:BPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR01:hKN+qlYKjVz00rYiMd8z3vmsuSPc0R01

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  97dca712c5d9c57617f3ce8df99299b8_JaffaCakes118
- Size
  
  581KB
- MD5
  
  97dca712c5d9c57617f3ce8df99299b8
- SHA1
  
  78a5d16cf89944bdbf2e61712981e59a4ce8552d
- SHA256
  
  24953ab5cf85e2d1980a97027473fe62e0eb009aa0f72405c99498872349f8ed
- SHA512
  
  6a2d1c200f5d9dc8e8eb88d626427eb943211de08504540c968f917ffcd436a9ae8181acfc8fec234bcc550e5e925ede9cabc08a9f6bf61d2ee70d1aa71122d5
- SSDEEP
  
  12288:BPkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR01:hKN+qlYKjVz00rYiMd8z3vmsuSPc0R01
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2