70e34aa44c7effadeb131144cc0465f42220c929650c560dc0b1429f618d8edc | Triage

Sharing

General

Target

27a085f40a46a2f31db954d5f7119430_JaffaCakes118
Size

312KB
Sample

240509-brjeysae7y
MD5

27a085f40a46a2f31db954d5f7119430
SHA1

c8cb896ebfe7760ef9bff1f81d1b3d635c9f78d8
SHA256

70e34aa44c7effadeb131144cc0465f42220c929650c560dc0b1429f618d8edc
SHA512

e8c4096aee26b2a947240196448a9f0afe9ae55ed1f80e0e38728b890e0765a6f7da56b294bab3bd4be49b699baa029533f5afb1212f56b40642ced368b55ec9
SSDEEP

6144:2rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM0n:2rRu6/eIo4t3PuFITKUAf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  27a085f40a46a2f31db954d5f7119430_JaffaCakes118
- Size
  
  312KB
- MD5
  
  27a085f40a46a2f31db954d5f7119430
- SHA1
  
  c8cb896ebfe7760ef9bff1f81d1b3d635c9f78d8
- SHA256
  
  70e34aa44c7effadeb131144cc0465f42220c929650c560dc0b1429f618d8edc
- SHA512
  
  e8c4096aee26b2a947240196448a9f0afe9ae55ed1f80e0e38728b890e0765a6f7da56b294bab3bd4be49b699baa029533f5afb1212f56b40642ced368b55ec9
- SSDEEP
  
  6144:2rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM0n:2rRu6/eIo4t3PuFITKUAf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2