e396887807dec169561b0b9f2656b093dbcbc77cf317c367b0c35c839c46ad43 | Triage

Sharing

General

Target

25f519bc75e99bdb0c2eecb0bf22a96e_JaffaCakes118
Size

313KB
Sample

240508-v6lcmsfc9t
MD5

25f519bc75e99bdb0c2eecb0bf22a96e
SHA1

ab184dc975d8d9422eaecc9eb28d306a9ffaf43f
SHA256

e396887807dec169561b0b9f2656b093dbcbc77cf317c367b0c35c839c46ad43
SHA512

4c57007d88a9c18107cb468a6d864e314b7ae5e1b66f3e04af68c21e87faba5c9c9e1c1d31b4fe3bad5aeac2739a1580672e4e230b521f802da43e26694d3fb8
SSDEEP

6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lx6:nryu6/eIo4vMResyEf0uP9d9UG0x6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  25f519bc75e99bdb0c2eecb0bf22a96e_JaffaCakes118
- Size
  
  313KB
- MD5
  
  25f519bc75e99bdb0c2eecb0bf22a96e
- SHA1
  
  ab184dc975d8d9422eaecc9eb28d306a9ffaf43f
- SHA256
  
  e396887807dec169561b0b9f2656b093dbcbc77cf317c367b0c35c839c46ad43
- SHA512
  
  4c57007d88a9c18107cb468a6d864e314b7ae5e1b66f3e04af68c21e87faba5c9c9e1c1d31b4fe3bad5aeac2739a1580672e4e230b521f802da43e26694d3fb8
- SSDEEP
  
  6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lx6:nryu6/eIo4vMResyEf0uP9d9UG0x6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2