19624e02fc560aea0aef6e392a3defcfffb9afed208babb32d009e6590f8812e | Triage

Sharing

General

Target

962344d5ab33f759757e3910a456fa0d_JaffaCakes118
Size

974KB
Sample

240814-pva5mssema
MD5

962344d5ab33f759757e3910a456fa0d
SHA1

4aa7d7c62f032368c8c41b52f0fdd04c12fd8a7f
SHA256

19624e02fc560aea0aef6e392a3defcfffb9afed208babb32d009e6590f8812e
SHA512

98989d95ed05e73c46c83deb07035e2826c69a341a85a3e0b55ccdf53a4ec0b1655b5451ebdace19fbf8549ca65b66191a11efe2d01095618c28c088266dca81
SSDEEP

24576:aJCU5JAiXLP9kxTS4JSkV26VhBvJ11BzzPDy05dNTf/4eF63iIRVOLm0b:cCAPWxO4wk8uhVJ111bDyEdNrdw3jRg/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  962344d5ab33f759757e3910a456fa0d_JaffaCakes118
- Size
  
  974KB
- MD5
  
  962344d5ab33f759757e3910a456fa0d
- SHA1
  
  4aa7d7c62f032368c8c41b52f0fdd04c12fd8a7f
- SHA256
  
  19624e02fc560aea0aef6e392a3defcfffb9afed208babb32d009e6590f8812e
- SHA512
  
  98989d95ed05e73c46c83deb07035e2826c69a341a85a3e0b55ccdf53a4ec0b1655b5451ebdace19fbf8549ca65b66191a11efe2d01095618c28c088266dca81
- SSDEEP
  
  24576:aJCU5JAiXLP9kxTS4JSkV26VhBvJ11BzzPDy05dNTf/4eF63iIRVOLm0b:cCAPWxO4wk8uhVJ111bDyEdNrdw3jRg/
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2