4af5b3ea010f8bb67ce17c85ff59d5fa8aaaa57b5ca46000a0a508b4054c4406 | Triage

Sharing

General

Target

2f1e8160501b4b6ff22b8a460660861c_JaffaCakes118
Size

1.1MB
Sample

241009-l1b3ca1gnd
MD5

2f1e8160501b4b6ff22b8a460660861c
SHA1

d66606a6862c7370f88bba6d053840661e1928ab
SHA256

4af5b3ea010f8bb67ce17c85ff59d5fa8aaaa57b5ca46000a0a508b4054c4406
SHA512

cb1c67d73744d17480ef3277c9e7ec53c5c38ff00ea58dc7fa0a63c7ad4d3dbeaa29cde168ec7374fe8899a4213b1f041be592df6007f9a19e8245e87842a6cf
SSDEEP

12288:TkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQtE:TkvDp9aEvkpMasXXceQHSFD1LzXffB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2f1e8160501b4b6ff22b8a460660861c_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  2f1e8160501b4b6ff22b8a460660861c
- SHA1
  
  d66606a6862c7370f88bba6d053840661e1928ab
- SHA256
  
  4af5b3ea010f8bb67ce17c85ff59d5fa8aaaa57b5ca46000a0a508b4054c4406
- SHA512
  
  cb1c67d73744d17480ef3277c9e7ec53c5c38ff00ea58dc7fa0a63c7ad4d3dbeaa29cde168ec7374fe8899a4213b1f041be592df6007f9a19e8245e87842a6cf
- SSDEEP
  
  12288:TkP9YgDp9RgVyuYqNAPxz2Y6KLvOnR/jdMaI/VqcXXoXRgYNth7WFD1LgJu2uQtE:TkvDp9aEvkpMasXXceQHSFD1LzXffB
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2