81649c86374dfca6c331ccc546f4be914fb10fd11a9b1d9b4222e829681f97c9 | Triage

Sharing

General

Target

0f5404b9833a896fa8ed84408f55d725_JaffaCakes118
Size

470KB
Sample

240625-ymgf5azame
MD5

0f5404b9833a896fa8ed84408f55d725
SHA1

5bd0bb292f09f9b7d60bfed62626b580bff7dc49
SHA256

81649c86374dfca6c331ccc546f4be914fb10fd11a9b1d9b4222e829681f97c9
SHA512

2560b3dd9f5f49c6ed6e9e258e287a17f636eaf14a1908c500844f7f78c2e2d5ff116a55415ffe9f6d8f57abcd115db452d1639bafb7d6525e6cb8212042733d
SSDEEP

12288:7IchrC8lRQ4fiuUN16mDSiBdePXeMI5hcda:7IcFCmDiN1rSgdevJOhqa

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0f5404b9833a896fa8ed84408f55d725_JaffaCakes118
- Size
  
  470KB
- MD5
  
  0f5404b9833a896fa8ed84408f55d725
- SHA1
  
  5bd0bb292f09f9b7d60bfed62626b580bff7dc49
- SHA256
  
  81649c86374dfca6c331ccc546f4be914fb10fd11a9b1d9b4222e829681f97c9
- SHA512
  
  2560b3dd9f5f49c6ed6e9e258e287a17f636eaf14a1908c500844f7f78c2e2d5ff116a55415ffe9f6d8f57abcd115db452d1639bafb7d6525e6cb8212042733d
- SSDEEP
  
  12288:7IchrC8lRQ4fiuUN16mDSiBdePXeMI5hcda:7IcFCmDiN1rSgdevJOhqa
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2