f4a034940c13a33533bf17a094130d9e9cf9ce5c006877c258c66104d18aae46 | Triage

Sharing

General

Target

d373e0fde7e34c82e64139a4f40c9385_JaffaCakes118
Size

853KB
Sample

240908-d7tlzawbnc
MD5

d373e0fde7e34c82e64139a4f40c9385
SHA1

e8461261c837112af2a37890e5bcf8f2a7398b5d
SHA256

f4a034940c13a33533bf17a094130d9e9cf9ce5c006877c258c66104d18aae46
SHA512

a920407e84dde39fbac9d74e0fa5ecf02124f9a81e2b6a05282be6b26518d0516fdb8f223011521f26feae8b3cd302a18b5fdb85fcc4047c8ed9e1e568c276c4
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d373e0fde7e34c82e64139a4f40c9385_JaffaCakes118
- Size
  
  853KB
- MD5
  
  d373e0fde7e34c82e64139a4f40c9385
- SHA1
  
  e8461261c837112af2a37890e5bcf8f2a7398b5d
- SHA256
  
  f4a034940c13a33533bf17a094130d9e9cf9ce5c006877c258c66104d18aae46
- SHA512
  
  a920407e84dde39fbac9d74e0fa5ecf02124f9a81e2b6a05282be6b26518d0516fdb8f223011521f26feae8b3cd302a18b5fdb85fcc4047c8ed9e1e568c276c4
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv:mqaxyDC2JmSoPvikO8
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2