21a12aabafe5ed09655cfa148a241573ae186bb5f7f9567571b9ca337f9aadf4 | Triage

Sharing

General

Target

03474e0aad240ac4c06519bc99937876_JaffaCakes118
Size

326KB
Sample

240427-py7m1sbd3z
MD5

03474e0aad240ac4c06519bc99937876
SHA1

409fee2666a1c13c8dd3bb8d08fc2be3f3e3d151
SHA256

21a12aabafe5ed09655cfa148a241573ae186bb5f7f9567571b9ca337f9aadf4
SHA512

79a899e64ebb88cfddeb456c0b04a406cbd6cb4a9fdcc1ab7e64507ff352d796ea8425a479397e31ae43ff06b731dc95bcfa7e56c88b5d86891fce5abe7547eb
SSDEEP

6144:qr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgO:qr4gu6/eIo4nULZKMRwxuPfk62

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  03474e0aad240ac4c06519bc99937876_JaffaCakes118
- Size
  
  326KB
- MD5
  
  03474e0aad240ac4c06519bc99937876
- SHA1
  
  409fee2666a1c13c8dd3bb8d08fc2be3f3e3d151
- SHA256
  
  21a12aabafe5ed09655cfa148a241573ae186bb5f7f9567571b9ca337f9aadf4
- SHA512
  
  79a899e64ebb88cfddeb456c0b04a406cbd6cb4a9fdcc1ab7e64507ff352d796ea8425a479397e31ae43ff06b731dc95bcfa7e56c88b5d86891fce5abe7547eb
- SSDEEP
  
  6144:qr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgO:qr4gu6/eIo4nULZKMRwxuPfk62
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2