13d9ee117e7e22449b251521cfc01bf8d593086d75f3abd9f9a5815a2fcd1a53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b14e95ae8c7f602b61c5dad7e0a515df_JaffaCakes118
Size

695KB
Sample

240616-ctfmhswand
MD5

b14e95ae8c7f602b61c5dad7e0a515df
SHA1

5270791aca0bb998c84a029ca848e5226071c68d
SHA256

13d9ee117e7e22449b251521cfc01bf8d593086d75f3abd9f9a5815a2fcd1a53
SHA512

3b88ad82ef73837565a38407b4b67da333b6632cb8f42952c8b5e7861c55a6ee081389b11be145b583f5867bfa5e6a9e0377da0f28c801d12f046d2e1e0617fd
SSDEEP

12288:/MIpUlZienR+PdNT0En9X2d3imtauUMrquQzZurRdSfAO3VnNL1FkBUJ8OGBRBwg:/Mi8RyNTd2d3imtauNysddSfAcVnNL1c

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b14e95ae8c7f602b61c5dad7e0a515df_JaffaCakes118
- Size
  
  695KB
- MD5
  
  b14e95ae8c7f602b61c5dad7e0a515df
- SHA1
  
  5270791aca0bb998c84a029ca848e5226071c68d
- SHA256
  
  13d9ee117e7e22449b251521cfc01bf8d593086d75f3abd9f9a5815a2fcd1a53
- SHA512
  
  3b88ad82ef73837565a38407b4b67da333b6632cb8f42952c8b5e7861c55a6ee081389b11be145b583f5867bfa5e6a9e0377da0f28c801d12f046d2e1e0617fd
- SSDEEP
  
  12288:/MIpUlZienR+PdNT0En9X2d3imtauUMrquQzZurRdSfAO3VnNL1FkBUJ8OGBRBwg:/Mi8RyNTd2d3imtauNysddSfAcVnNL1c
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2