21c49815f3fca58cc194816f82cbe94bf2e083f4190db1235c98fee87de37c0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9559944ea48db94213af743596d5832_JaffaCakes118
Size

853KB
Sample

240614-m5x12s1gpl
MD5

a9559944ea48db94213af743596d5832
SHA1

80119f867a4f515649b1e47d3a9810573f60dc4d
SHA256

21c49815f3fca58cc194816f82cbe94bf2e083f4190db1235c98fee87de37c0b
SHA512

768b28ffe0487411ab6fffb0f654c333d17795e1da7ed120810390d198f497a120d14e557c5276338b85238d27123220992acbeb9bc6643834f296a68bc6103d
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8

Score

7^/10

Malware Config

Targets

- Target
  
  a9559944ea48db94213af743596d5832_JaffaCakes118
- Size
  
  853KB
- MD5
  
  a9559944ea48db94213af743596d5832
- SHA1
  
  80119f867a4f515649b1e47d3a9810573f60dc4d
- SHA256
  
  21c49815f3fca58cc194816f82cbe94bf2e083f4190db1235c98fee87de37c0b
- SHA512
  
  768b28ffe0487411ab6fffb0f654c333d17795e1da7ed120810390d198f497a120d14e557c5276338b85238d27123220992acbeb9bc6643834f296a68bc6103d
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2