05de3a284beb75b022fc86cc2514068385bb259c6021453416725b6447013b3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16141188d82eb828d0ae943cbb065a9e_JaffaCakes118
Size

304KB
Sample

240505-fle8kaah66
MD5

16141188d82eb828d0ae943cbb065a9e
SHA1

00112bba0e912c5a2fa375f2a9293499f7e64f96
SHA256

05de3a284beb75b022fc86cc2514068385bb259c6021453416725b6447013b3e
SHA512

6fe09c670be9651a4b67a97478441c1f986afd13a6bfbdc7d915dbfd374346e1c7718e278e53ed193d084c582c14a05dfc42fda897ae9d05dd1df6d659530b8f
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPM:Nrkuu6/eIo4tQW62T+uTwM6YVxm24M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  16141188d82eb828d0ae943cbb065a9e_JaffaCakes118
- Size
  
  304KB
- MD5
  
  16141188d82eb828d0ae943cbb065a9e
- SHA1
  
  00112bba0e912c5a2fa375f2a9293499f7e64f96
- SHA256
  
  05de3a284beb75b022fc86cc2514068385bb259c6021453416725b6447013b3e
- SHA512
  
  6fe09c670be9651a4b67a97478441c1f986afd13a6bfbdc7d915dbfd374346e1c7718e278e53ed193d084c582c14a05dfc42fda897ae9d05dd1df6d659530b8f
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPM:Nrkuu6/eIo4tQW62T+uTwM6YVxm24M
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2