6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8 | Triage

Sharing

General

Target

fb9d4f6f8bd7173a7cb2dac5329742c7_JaffaCakes118
Size

89KB
Sample

240420-bsyw2adf7w
MD5

fb9d4f6f8bd7173a7cb2dac5329742c7
SHA1

c9d288907a37e0db1c98311f23605a886a6fe0b0
SHA256

6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8
SHA512

6d96bfff238217d73d4c865a2bf3c656181b7cd98669c2b6e51f5e06baf301099716a906c3dd5757d3a318eb4cf5ff6d4225fe4ce220c82376eb17e87803c00b
SSDEEP

1536:Tv3SHuJV9QaxMHB0UxMkzOt7HcvJGt5AdHIOWnToIf12Z9:TvkuJVFMhAWJGSCTBf12Z9

Score

7^/10

Malware Config

Targets

- Target
  
  fb9d4f6f8bd7173a7cb2dac5329742c7_JaffaCakes118
- Size
  
  89KB
- MD5
  
  fb9d4f6f8bd7173a7cb2dac5329742c7
- SHA1
  
  c9d288907a37e0db1c98311f23605a886a6fe0b0
- SHA256
  
  6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8
- SHA512
  
  6d96bfff238217d73d4c865a2bf3c656181b7cd98669c2b6e51f5e06baf301099716a906c3dd5757d3a318eb4cf5ff6d4225fe4ce220c82376eb17e87803c00b
- SSDEEP
  
  1536:Tv3SHuJV9QaxMHB0UxMkzOt7HcvJGt5AdHIOWnToIf12Z9:TvkuJVFMhAWJGSCTBf12Z9
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2