073cedef58b06ce2d8e23b572c04e52a040925e5c3687dd564a9b0fab4889d26 | Triage

Sharing

General

Target

2efaadb0cdf83b30af530f65b160b782_JaffaCakes118
Size

313KB
Sample

240510-n2t1nagb73
MD5

2efaadb0cdf83b30af530f65b160b782
SHA1

54d949de352f33955c55712e204313982d74f0e4
SHA256

073cedef58b06ce2d8e23b572c04e52a040925e5c3687dd564a9b0fab4889d26
SHA512

e33bcf9d0493c37138fd413d2e930efc8f7c01749b97fd9143e006e6dd717ca3035fe79e82650d1d235c6b81ac912f15b8f3917ded10d85f41d4458faf2f0dd6
SSDEEP

6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVD3:Irfu6/eIo4jVW5soVCcQovoO0DJM+EY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2efaadb0cdf83b30af530f65b160b782_JaffaCakes118
- Size
  
  313KB
- MD5
  
  2efaadb0cdf83b30af530f65b160b782
- SHA1
  
  54d949de352f33955c55712e204313982d74f0e4
- SHA256
  
  073cedef58b06ce2d8e23b572c04e52a040925e5c3687dd564a9b0fab4889d26
- SHA512
  
  e33bcf9d0493c37138fd413d2e930efc8f7c01749b97fd9143e006e6dd717ca3035fe79e82650d1d235c6b81ac912f15b8f3917ded10d85f41d4458faf2f0dd6
- SSDEEP
  
  6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVD3:Irfu6/eIo4jVW5soVCcQovoO0DJM+EY
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2