237929b9007c9a24dc57c33e70833502d0b966308cf9f2a55a5dbed38ac2c7b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11984c2700b7c489be685f38ae8d4a96_JaffaCakes118
Size

316KB
Sample

240504-hstqmseg4w
MD5

11984c2700b7c489be685f38ae8d4a96
SHA1

796f131fff7e083352001eeccdc55da7379d009b
SHA256

237929b9007c9a24dc57c33e70833502d0b966308cf9f2a55a5dbed38ac2c7b3
SHA512

46684431b3f31bebc6ab702dd5f5f9b74826209ac7a0ec94daa1f3a25c5fe7671804f172591fd565de2ca3c4356d1286d0117c04d22c9e22492ba31f37f1b69f
SSDEEP

6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xE:Cr7kuveY33FJUo7MDkA69

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11984c2700b7c489be685f38ae8d4a96_JaffaCakes118
- Size
  
  316KB
- MD5
  
  11984c2700b7c489be685f38ae8d4a96
- SHA1
  
  796f131fff7e083352001eeccdc55da7379d009b
- SHA256
  
  237929b9007c9a24dc57c33e70833502d0b966308cf9f2a55a5dbed38ac2c7b3
- SHA512
  
  46684431b3f31bebc6ab702dd5f5f9b74826209ac7a0ec94daa1f3a25c5fe7671804f172591fd565de2ca3c4356d1286d0117c04d22c9e22492ba31f37f1b69f
- SSDEEP
  
  6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xE:Cr7kuveY33FJUo7MDkA69
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2