398a25fe6fc02ec27bc3da1ed50b825a8a65bd437882b86a242696d511745b9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae5720e377fcd8dbe10370fc2e29bac9_JaffaCakes118
Size

709KB
Sample

240615-n82n3szdjb
MD5

ae5720e377fcd8dbe10370fc2e29bac9
SHA1

8d7606709627671a406fd1d787feb730ec46cb00
SHA256

398a25fe6fc02ec27bc3da1ed50b825a8a65bd437882b86a242696d511745b9d
SHA512

a1ba1cd51b7c9c59540099c4db6c6a53a6cc07d77e56d49824b8d8e066f7b9df1e5d14935d16a1524703345e43cdd29bf8f195450e76cf85c2ead6007884707e
SSDEEP

12288:YigqIkHyLkIOeee+fAZwfqDPdM+UULoGTxOk82HmVJZP0a:Yik6yIVeSAZwCCDGTxOB2HEoa

Score

7^/10

Malware Config

Targets

- Target
  
  ae5720e377fcd8dbe10370fc2e29bac9_JaffaCakes118
- Size
  
  709KB
- MD5
  
  ae5720e377fcd8dbe10370fc2e29bac9
- SHA1
  
  8d7606709627671a406fd1d787feb730ec46cb00
- SHA256
  
  398a25fe6fc02ec27bc3da1ed50b825a8a65bd437882b86a242696d511745b9d
- SHA512
  
  a1ba1cd51b7c9c59540099c4db6c6a53a6cc07d77e56d49824b8d8e066f7b9df1e5d14935d16a1524703345e43cdd29bf8f195450e76cf85c2ead6007884707e
- SSDEEP
  
  12288:YigqIkHyLkIOeee+fAZwfqDPdM+UULoGTxOk82HmVJZP0a:Yik6yIVeSAZwCCDGTxOB2HEoa
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2