4ef22fa43df1eba20bb29ca6d97ab07f881fb8c5169de58e897df2f881b02d85 | Triage

Sharing

General

Target

b733f50887324f968b448cc4ead74473_JaffaCakes118
Size

712KB
Sample

240617-g8ljjayckd
MD5

b733f50887324f968b448cc4ead74473
SHA1

44328b7d06188510ac5355852383d8bd2171a31e
SHA256

4ef22fa43df1eba20bb29ca6d97ab07f881fb8c5169de58e897df2f881b02d85
SHA512

72a2122ed059a12b0a3ccd9523a1edc3660458d966f4aefe47b3ad944d4be8fabaf86a76ba1381a939d089f21780d425bf3dc7e039570fe4df63cb9acfe24101
SSDEEP

12288:NX4nD2Ltd/sZ36PvvFtJ04JGvS3diL1H5ciyCvb5ICXvvnaa3dM:NX4DKdW6PVtJt4vL1HgCD+CHnaatM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b733f50887324f968b448cc4ead74473_JaffaCakes118
- Size
  
  712KB
- MD5
  
  b733f50887324f968b448cc4ead74473
- SHA1
  
  44328b7d06188510ac5355852383d8bd2171a31e
- SHA256
  
  4ef22fa43df1eba20bb29ca6d97ab07f881fb8c5169de58e897df2f881b02d85
- SHA512
  
  72a2122ed059a12b0a3ccd9523a1edc3660458d966f4aefe47b3ad944d4be8fabaf86a76ba1381a939d089f21780d425bf3dc7e039570fe4df63cb9acfe24101
- SSDEEP
  
  12288:NX4nD2Ltd/sZ36PvvFtJ04JGvS3diL1H5ciyCvb5ICXvvnaa3dM:NX4DKdW6PVtJt4vL1HgCD+CHnaatM
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2