f0ce42d46e5875ce5708a63d00f10d69e8733676fc7b5f4db6882d35bafd328d | Triage

Sharing

General

Target

0707d37a41c59975201427c533e49714_JaffaCakes118
Size

72KB
Sample

241001-xsl35azake
MD5

0707d37a41c59975201427c533e49714
SHA1

966fcc37fadd5237a31ec0c6f63dfcca04088fc4
SHA256

f0ce42d46e5875ce5708a63d00f10d69e8733676fc7b5f4db6882d35bafd328d
SHA512

121df6bbdfd8282c0cdfcb4152ff7ec9bab7545b7f61f40393d74f965101c542c0eeb0728221a7f9c4232149434aa47f553e41163a0a6ea72887ac39e0cacffc
SSDEEP

1536:ou4BJHzsyKMaG2uHTvnQ19X+sbtF6DY717CEJvcsyMGw2o:oumHAbh/4rWX+sbtF6DYZ7CERcBo

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  0707d37a41c59975201427c533e49714_JaffaCakes118
- Size
  
  72KB
- MD5
  
  0707d37a41c59975201427c533e49714
- SHA1
  
  966fcc37fadd5237a31ec0c6f63dfcca04088fc4
- SHA256
  
  f0ce42d46e5875ce5708a63d00f10d69e8733676fc7b5f4db6882d35bafd328d
- SHA512
  
  121df6bbdfd8282c0cdfcb4152ff7ec9bab7545b7f61f40393d74f965101c542c0eeb0728221a7f9c4232149434aa47f553e41163a0a6ea72887ac39e0cacffc
- SSDEEP
  
  1536:ou4BJHzsyKMaG2uHTvnQ19X+sbtF6DY717CEJvcsyMGw2o:oumHAbh/4rWX+sbtF6DYZ7CERcBo
Score

7^/10

defense_evasion discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2