c7c0a9134e64ef94564913cac2269c1cdb95eda036e1c9110216e36bfe42810a | Triage

Sharing

General

Target

10b70fa0f2ac83a48227ad0d7c8f22f5_JaffaCakes118
Size

313KB
Sample

240503-rjt5gsha2z
MD5

10b70fa0f2ac83a48227ad0d7c8f22f5
SHA1

6f480a1a7ddd111e5d0bd233173d207c6b336d27
SHA256

c7c0a9134e64ef94564913cac2269c1cdb95eda036e1c9110216e36bfe42810a
SHA512

508dede32b5764403b878dba855d396d1bcf3282d16764506d85cd5469ae91f2b02ce8699ab5cdbe631d6c8da9cd1342350ac68e9b99a8caad901b4eccd6e71b
SSDEEP

6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDC:Irfu6/eIo4jVW5soVCcQovoO0DJM+Eh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  10b70fa0f2ac83a48227ad0d7c8f22f5_JaffaCakes118
- Size
  
  313KB
- MD5
  
  10b70fa0f2ac83a48227ad0d7c8f22f5
- SHA1
  
  6f480a1a7ddd111e5d0bd233173d207c6b336d27
- SHA256
  
  c7c0a9134e64ef94564913cac2269c1cdb95eda036e1c9110216e36bfe42810a
- SHA512
  
  508dede32b5764403b878dba855d396d1bcf3282d16764506d85cd5469ae91f2b02ce8699ab5cdbe631d6c8da9cd1342350ac68e9b99a8caad901b4eccd6e71b
- SSDEEP
  
  6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDC:Irfu6/eIo4jVW5soVCcQovoO0DJM+Eh
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2