46ebb36271f4037082d39e4adadceb5de593e6503698fe7d909afe765c4c0c0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1bdaca82c1afaa92832c98380de4ab8_JaffaCakes118
Size

1.2MB
Sample

240915-fjxd3awglh
MD5

e1bdaca82c1afaa92832c98380de4ab8
SHA1

c35e344a9a8af0f4f80e6e7a5d19602d6cd95e62
SHA256

46ebb36271f4037082d39e4adadceb5de593e6503698fe7d909afe765c4c0c0f
SHA512

e94341bb9ea5c555ecf5b395cd98381de31dc2f2d660fee37887537f5b1ff815d2f2f46f9ba23c0b3616807aa20b3f532c2f8099fbb63370b4e02108c4f23f19
SSDEEP

24576:wnBe4sPbdWMYsFeIDdkoLSA+PXMAddUPIgl:Yk4sDJ9DWoLSzXMbIgl

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e1bdaca82c1afaa92832c98380de4ab8_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  e1bdaca82c1afaa92832c98380de4ab8
- SHA1
  
  c35e344a9a8af0f4f80e6e7a5d19602d6cd95e62
- SHA256
  
  46ebb36271f4037082d39e4adadceb5de593e6503698fe7d909afe765c4c0c0f
- SHA512
  
  e94341bb9ea5c555ecf5b395cd98381de31dc2f2d660fee37887537f5b1ff815d2f2f46f9ba23c0b3616807aa20b3f532c2f8099fbb63370b4e02108c4f23f19
- SSDEEP
  
  24576:wnBe4sPbdWMYsFeIDdkoLSA+PXMAddUPIgl:Yk4sDJ9DWoLSzXMbIgl
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2