c6269e55be1782bbb263e6bbe8c0770e5f30e2aa6f484d6db97993bbe16eecc1 | Triage

Sharing

General

Target

167aa1216dcd03e7615fa5c2ed3ff8e2_JaffaCakes118
Size

313KB
Sample

240505-hma2cade55
MD5

167aa1216dcd03e7615fa5c2ed3ff8e2
SHA1

67560cc9017c4b4348bbf734851d8ecb3b065177
SHA256

c6269e55be1782bbb263e6bbe8c0770e5f30e2aa6f484d6db97993bbe16eecc1
SHA512

3b661f9683220ecc831161086e28f5295e283da36ae4dbbf24d3ef1497076312bf7d0446cf3d7dbef6a725e43e310a7d037c81174a122458d180d4997e1a8489
SSDEEP

6144:0rJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzg:0rfu6/eIo4XwlWKM231t5UnRr3DdRp5l

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  167aa1216dcd03e7615fa5c2ed3ff8e2_JaffaCakes118
- Size
  
  313KB
- MD5
  
  167aa1216dcd03e7615fa5c2ed3ff8e2
- SHA1
  
  67560cc9017c4b4348bbf734851d8ecb3b065177
- SHA256
  
  c6269e55be1782bbb263e6bbe8c0770e5f30e2aa6f484d6db97993bbe16eecc1
- SHA512
  
  3b661f9683220ecc831161086e28f5295e283da36ae4dbbf24d3ef1497076312bf7d0446cf3d7dbef6a725e43e310a7d037c81174a122458d180d4997e1a8489
- SSDEEP
  
  6144:0rJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzg:0rfu6/eIo4XwlWKM231t5UnRr3DdRp5l
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2