af7a8d3ec3afd567a46668358d3a6427f116543d16f156e4f255932740e214bb | Triage

Sharing

General

Target

ead25e0d3fcf1fd65f2a8e07b939cb38_JaffaCakes118
Size

1.1MB
Sample

240919-hy9ztawfre
MD5

ead25e0d3fcf1fd65f2a8e07b939cb38
SHA1

361a5f68d27863abd5655b740ee90fecd6e9f414
SHA256

af7a8d3ec3afd567a46668358d3a6427f116543d16f156e4f255932740e214bb
SHA512

cd2ce306092f86d6d50ffef86dbe6ffc0ee6c8e6eae5d1b4737a66d8513b37f6dc556d39cac736c655340447388e43aeb76c93558930709640d9b6893b9c152a
SSDEEP

24576:OcWdcRqqXDRypx3iTY+5qWkEQrtEoH4PC40Rtk:Oc5mdjeoHsC3Pk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ead25e0d3fcf1fd65f2a8e07b939cb38_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  ead25e0d3fcf1fd65f2a8e07b939cb38
- SHA1
  
  361a5f68d27863abd5655b740ee90fecd6e9f414
- SHA256
  
  af7a8d3ec3afd567a46668358d3a6427f116543d16f156e4f255932740e214bb
- SHA512
  
  cd2ce306092f86d6d50ffef86dbe6ffc0ee6c8e6eae5d1b4737a66d8513b37f6dc556d39cac736c655340447388e43aeb76c93558930709640d9b6893b9c152a
- SSDEEP
  
  24576:OcWdcRqqXDRypx3iTY+5qWkEQrtEoH4PC40Rtk:Oc5mdjeoHsC3Pk
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2