073ec2b49b1c4195c3bb32c6d7494b8dc10ca68cb2e22e8371aaf6712bfab177 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21564e5d83d9d9a7ee1045c4705c3a62_JaffaCakes118
Size

199KB
Sample

240703-gxjwka1bjc
MD5

21564e5d83d9d9a7ee1045c4705c3a62
SHA1

1d9b610a292b987faa3731c9f6de08bffc4a27f2
SHA256

073ec2b49b1c4195c3bb32c6d7494b8dc10ca68cb2e22e8371aaf6712bfab177
SHA512

60ac84f801639105d2e048074f797bc616ccebf08a9071ab65b797c8b8982012e791659995b6f47ec152a95d37d915fc001b9f774af87da93eceee24a805a426
SSDEEP

6144:cqpUZ6i+kpAPzGvH90HG/FE2anwzArIy:DpUZNT3jPzAsy

Score

7^/10

Malware Config

Targets

- Target
  
  21564e5d83d9d9a7ee1045c4705c3a62_JaffaCakes118
- Size
  
  199KB
- MD5
  
  21564e5d83d9d9a7ee1045c4705c3a62
- SHA1
  
  1d9b610a292b987faa3731c9f6de08bffc4a27f2
- SHA256
  
  073ec2b49b1c4195c3bb32c6d7494b8dc10ca68cb2e22e8371aaf6712bfab177
- SHA512
  
  60ac84f801639105d2e048074f797bc616ccebf08a9071ab65b797c8b8982012e791659995b6f47ec152a95d37d915fc001b9f774af87da93eceee24a805a426
- SSDEEP
  
  6144:cqpUZ6i+kpAPzGvH90HG/FE2anwzArIy:DpUZNT3jPzAsy
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2