bf3312388585513efa90a4b2174b1f274a7b937983d0a1f09e5ef233b22e5fcd | Triage

Sharing

General

Target

b58e5addd131b8207aad707042a2d4fe_JaffaCakes118
Size

211KB
Sample

240821-31hcss1fmj
MD5

b58e5addd131b8207aad707042a2d4fe
SHA1

565b3ee99ae2263b2f0f3613b5b66eda0a1254f8
SHA256

bf3312388585513efa90a4b2174b1f274a7b937983d0a1f09e5ef233b22e5fcd
SHA512

1be9a9a03a0484db11cec87080e4f2dc3c1867c0636a6706fedfa677dcf6bb5a5a1ffe4249f9948df0aa65dcdc65c8e8cf465745be0e020a74f895a86081ec03
SSDEEP

6144:dOi91glXpWtPFjCn/JoF6nPRNIPgt19dFjl:Ii9mX4KnxoFqRNDTVJ

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  b58e5addd131b8207aad707042a2d4fe_JaffaCakes118
- Size
  
  211KB
- MD5
  
  b58e5addd131b8207aad707042a2d4fe
- SHA1
  
  565b3ee99ae2263b2f0f3613b5b66eda0a1254f8
- SHA256
  
  bf3312388585513efa90a4b2174b1f274a7b937983d0a1f09e5ef233b22e5fcd
- SHA512
  
  1be9a9a03a0484db11cec87080e4f2dc3c1867c0636a6706fedfa677dcf6bb5a5a1ffe4249f9948df0aa65dcdc65c8e8cf465745be0e020a74f895a86081ec03
- SSDEEP
  
  6144:dOi91glXpWtPFjCn/JoF6nPRNIPgt19dFjl:Ii9mX4KnxoFqRNDTVJ
Score

6^/10

discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2