39b102159e23891643b19960869b4330a35e35a93c2994949f3a370475684b1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3407bf9cbd5d1535a81c5db247e77a36_JaffaCakes118
Size

327KB
Sample

240511-l31tgsca5y
MD5

3407bf9cbd5d1535a81c5db247e77a36
SHA1

fc03bb8fe966fcb9fdd0fac1e896f17439d59f9e
SHA256

39b102159e23891643b19960869b4330a35e35a93c2994949f3a370475684b1c
SHA512

5a45237500817ea054c382f9be98f832daffd800a66b9bd4580c70084eb976dcef8b584915de135b936b1428a5bd0f7c46cc89613023f1dd3ec51db11f8bb1b7
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:hr4iu6/eIo4Rsw33AtsmQs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3407bf9cbd5d1535a81c5db247e77a36_JaffaCakes118
- Size
  
  327KB
- MD5
  
  3407bf9cbd5d1535a81c5db247e77a36
- SHA1
  
  fc03bb8fe966fcb9fdd0fac1e896f17439d59f9e
- SHA256
  
  39b102159e23891643b19960869b4330a35e35a93c2994949f3a370475684b1c
- SHA512
  
  5a45237500817ea054c382f9be98f832daffd800a66b9bd4580c70084eb976dcef8b584915de135b936b1428a5bd0f7c46cc89613023f1dd3ec51db11f8bb1b7
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:hr4iu6/eIo4Rsw33AtsmQs
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2