2ca0dbdb96434b326373307249a4f2ddc58d54e11f0ff9ddd833f0f3075e6f4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ff79404be5bf8cbb4dbb53f2643f1d_JaffaCakes118
Size

325KB
Sample

240505-e6z8ssfb3s
MD5

15ff79404be5bf8cbb4dbb53f2643f1d
SHA1

e0047bca9a08103404e663f81dd931445c1b0ca6
SHA256

2ca0dbdb96434b326373307249a4f2ddc58d54e11f0ff9ddd833f0f3075e6f4d
SHA512

a8903a913d0fce869fba3f9cd44ebea14dc5ffcf747565ad7f4fe384faee2d94a0064d249dd10f70de38403b22c46f044342c5fd941296f6ecebf9cbaf7e7673
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ob:kr1B3u6/eIo4ArVUBQCCYOqmO5ob

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  15ff79404be5bf8cbb4dbb53f2643f1d_JaffaCakes118
- Size
  
  325KB
- MD5
  
  15ff79404be5bf8cbb4dbb53f2643f1d
- SHA1
  
  e0047bca9a08103404e663f81dd931445c1b0ca6
- SHA256
  
  2ca0dbdb96434b326373307249a4f2ddc58d54e11f0ff9ddd833f0f3075e6f4d
- SHA512
  
  a8903a913d0fce869fba3f9cd44ebea14dc5ffcf747565ad7f4fe384faee2d94a0064d249dd10f70de38403b22c46f044342c5fd941296f6ecebf9cbaf7e7673
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ob:kr1B3u6/eIo4ArVUBQCCYOqmO5ob
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2