77e0e76a695f4b9e74fa8b5c4ae070ba228b0b6fc7f9b21291638156bfe4878f | Triage

Sharing

General

Target

ab7d4cce8a52661339bebdc6a6f2a55c_JaffaCakes118
Size

235KB
Sample

240819-sfkmba1cmb
MD5

ab7d4cce8a52661339bebdc6a6f2a55c
SHA1

8bce868611ee2d22b2588dc6e0a25a4d6b5a5759
SHA256

77e0e76a695f4b9e74fa8b5c4ae070ba228b0b6fc7f9b21291638156bfe4878f
SHA512

aa29ac9c36d87301b04f33d6b9abd1fcde04956a44a20c7d64ca33d89960db81e3d24a9c1760689663059e8a710c0837b98a52562e56503265f0b778c40fb3d8
SSDEEP

6144:fsZ/ZxQoY38MRHRiFNKa38WVZzOvJYVwBMz:fsZ/ZxQoY3N4BVUvJl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ab7d4cce8a52661339bebdc6a6f2a55c_JaffaCakes118
- Size
  
  235KB
- MD5
  
  ab7d4cce8a52661339bebdc6a6f2a55c
- SHA1
  
  8bce868611ee2d22b2588dc6e0a25a4d6b5a5759
- SHA256
  
  77e0e76a695f4b9e74fa8b5c4ae070ba228b0b6fc7f9b21291638156bfe4878f
- SHA512
  
  aa29ac9c36d87301b04f33d6b9abd1fcde04956a44a20c7d64ca33d89960db81e3d24a9c1760689663059e8a710c0837b98a52562e56503265f0b778c40fb3d8
- SSDEEP
  
  6144:fsZ/ZxQoY38MRHRiFNKa38WVZzOvJYVwBMz:fsZ/ZxQoY3N4BVUvJl
Score

7^/10

discovery persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence