81966a79010fb798795b7e255f14bedf00a2c94899fb30c29d4739590732cb9f | Triage

Sharing

General

Target

aad91b80b63a0cb9307e981a566370ea_JaffaCakes118
Size

760KB
Sample

240819-npgvka1hjh
MD5

aad91b80b63a0cb9307e981a566370ea
SHA1

6e9e741b70639207f598248e1563be40ddcf9b33
SHA256

81966a79010fb798795b7e255f14bedf00a2c94899fb30c29d4739590732cb9f
SHA512

5a0c05fa3201ff7a054a161aac0828267ffc3be730cb662fee88e9e52c6802f3218351b450bb3881f915c21070f7371b8751c564c21dd1d9f312f53e8bb22b5d
SSDEEP

12288:8Iyv5dgpTH+ESb2os6HnOPo0VdfG1mIn0sSelRnlUZrHQcyDBCZfv:8Iyv5dgpTH+ESios6WJH6m0hl9lUtwzO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aad91b80b63a0cb9307e981a566370ea_JaffaCakes118
- Size
  
  760KB
- MD5
  
  aad91b80b63a0cb9307e981a566370ea
- SHA1
  
  6e9e741b70639207f598248e1563be40ddcf9b33
- SHA256
  
  81966a79010fb798795b7e255f14bedf00a2c94899fb30c29d4739590732cb9f
- SHA512
  
  5a0c05fa3201ff7a054a161aac0828267ffc3be730cb662fee88e9e52c6802f3218351b450bb3881f915c21070f7371b8751c564c21dd1d9f312f53e8bb22b5d
- SSDEEP
  
  12288:8Iyv5dgpTH+ESb2os6HnOPo0VdfG1mIn0sSelRnlUZrHQcyDBCZfv:8Iyv5dgpTH+ESios6WJH6m0hl9lUtwzO
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2