d52f08143e2a16dda2e98d32c7cac55c2480ff17608bc5e7a379a8a7d93f9462 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f825b0adf05397e2fbde6de1b4a0efe5_JaffaCakes118
Size

459KB
Sample

240418-ran7wafa82
MD5

f825b0adf05397e2fbde6de1b4a0efe5
SHA1

1f9913efa61fe91ae689a8ab2e05b4fe75561bc7
SHA256

d52f08143e2a16dda2e98d32c7cac55c2480ff17608bc5e7a379a8a7d93f9462
SHA512

22a4603bce486639ac69c9bbc5865038ec5c055bc214cc9b4d636fc9c9b2f951dd5e4b096406efad77e7368841615c73aecac9fe226bd3bfbb9dc36fe81dfea5
SSDEEP

12288:zYc5w8vqTs1PQrr5tPrdA8goawgHQh+g:zYc5wrTs1PQr7jPgZbHdg

Score

7^/10

Malware Config

Targets

- Target
  
  f825b0adf05397e2fbde6de1b4a0efe5_JaffaCakes118
- Size
  
  459KB
- MD5
  
  f825b0adf05397e2fbde6de1b4a0efe5
- SHA1
  
  1f9913efa61fe91ae689a8ab2e05b4fe75561bc7
- SHA256
  
  d52f08143e2a16dda2e98d32c7cac55c2480ff17608bc5e7a379a8a7d93f9462
- SHA512
  
  22a4603bce486639ac69c9bbc5865038ec5c055bc214cc9b4d636fc9c9b2f951dd5e4b096406efad77e7368841615c73aecac9fe226bd3bfbb9dc36fe81dfea5
- SSDEEP
  
  12288:zYc5w8vqTs1PQrr5tPrdA8goawgHQh+g:zYc5wrTs1PQr7jPgZbHdg
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2