14efb8fde524aecfcec71de965b85b59b87f0207a77eb9fb6fc48a3b7c666f1c | Triage

Sharing

General

Target

09806b53733a41744b7899b1fd4bb54e_JaffaCakes118
Size

341KB
Sample

240430-la1m1shc4t
MD5

09806b53733a41744b7899b1fd4bb54e
SHA1

cdbce9291e81aba1eb6edc38ff8f5ef2d0ff7448
SHA256

14efb8fde524aecfcec71de965b85b59b87f0207a77eb9fb6fc48a3b7c666f1c
SHA512

eabec0ef692ce8e1b2f6f6281d1ee3d2b9a17702f9199764831e482f243d03b26467926ce37fcbe8b6f88c5ccc6a0618c5eb227fbce081bc95f82c3fa6682074
SSDEEP

6144:KtsVKBiKn407dUMCC4jaOmUku9zRKRnEHXdWorMj5lJH6BYWjNhbp:UiK40dUBC4jaOf9sRnENFrOhaSWjNhbp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  09806b53733a41744b7899b1fd4bb54e_JaffaCakes118
- Size
  
  341KB
- MD5
  
  09806b53733a41744b7899b1fd4bb54e
- SHA1
  
  cdbce9291e81aba1eb6edc38ff8f5ef2d0ff7448
- SHA256
  
  14efb8fde524aecfcec71de965b85b59b87f0207a77eb9fb6fc48a3b7c666f1c
- SHA512
  
  eabec0ef692ce8e1b2f6f6281d1ee3d2b9a17702f9199764831e482f243d03b26467926ce37fcbe8b6f88c5ccc6a0618c5eb227fbce081bc95f82c3fa6682074
- SSDEEP
  
  6144:KtsVKBiKn407dUMCC4jaOmUku9zRKRnEHXdWorMj5lJH6BYWjNhbp:UiK40dUBC4jaOf9sRnENFrOhaSWjNhbp
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2