996283783cc445f82d3243f9bd0e8b5c48fa653f4790ba1f628f8fdce0f37fb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb30d4fc39c3e47e6a07f55e2af02a1b_JaffaCakes118
Size

788KB
Sample

240928-a2p5taxhkr
MD5

fb30d4fc39c3e47e6a07f55e2af02a1b
SHA1

4314dbe0c434153be028cdd19f2cc2897f1cf716
SHA256

996283783cc445f82d3243f9bd0e8b5c48fa653f4790ba1f628f8fdce0f37fb7
SHA512

0bd846ce8c66fbaf4905c7be9d5e5b844449f4fa7998ad3d2a684b6b1ae0c8e9467495ecae01b2b2599e2dc6e23b73a25e2d9839fa55b508b81aea8ebff71cde
SSDEEP

12288:0UcFiU5FsJ1/93InBZqpzUF4AnjZnMei/SFfdYTQH1U2/6t8q:0UcFiU5FsJtAqtURjZnli5kVUC6t8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fb30d4fc39c3e47e6a07f55e2af02a1b_JaffaCakes118
- Size
  
  788KB
- MD5
  
  fb30d4fc39c3e47e6a07f55e2af02a1b
- SHA1
  
  4314dbe0c434153be028cdd19f2cc2897f1cf716
- SHA256
  
  996283783cc445f82d3243f9bd0e8b5c48fa653f4790ba1f628f8fdce0f37fb7
- SHA512
  
  0bd846ce8c66fbaf4905c7be9d5e5b844449f4fa7998ad3d2a684b6b1ae0c8e9467495ecae01b2b2599e2dc6e23b73a25e2d9839fa55b508b81aea8ebff71cde
- SSDEEP
  
  12288:0UcFiU5FsJ1/93InBZqpzUF4AnjZnMei/SFfdYTQH1U2/6t8q:0UcFiU5FsJtAqtURjZnli5kVUC6t8
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2