34e8af375074aa10fdc54fafcd24790374bd355d436d206cade62059abd820b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ff2b1bfc4c368ffdfc1cc0c90020c3_JaffaCakes118
Size

618KB
Sample

240511-xbz9esbh4w
MD5

35ff2b1bfc4c368ffdfc1cc0c90020c3
SHA1

f7cad11274c7dba1d32a4873a1b70318fdadde4b
SHA256

34e8af375074aa10fdc54fafcd24790374bd355d436d206cade62059abd820b1
SHA512

ff5a3e328c49656007d5b4017e60cc38a11f98b03515d0868f59c37f62fb2854474ef4b750c7cfabbb43fd17ee039dbff6b93432ea722bda15ae33d13e593065
SSDEEP

12288:frrjkogdCi7WNwx9l8oEGkuveY39Bn3Y4z9GiC0bZ6SBDo:4ogvWNwmDuXnnI4zUiC09Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  35ff2b1bfc4c368ffdfc1cc0c90020c3_JaffaCakes118
- Size
  
  618KB
- MD5
  
  35ff2b1bfc4c368ffdfc1cc0c90020c3
- SHA1
  
  f7cad11274c7dba1d32a4873a1b70318fdadde4b
- SHA256
  
  34e8af375074aa10fdc54fafcd24790374bd355d436d206cade62059abd820b1
- SHA512
  
  ff5a3e328c49656007d5b4017e60cc38a11f98b03515d0868f59c37f62fb2854474ef4b750c7cfabbb43fd17ee039dbff6b93432ea722bda15ae33d13e593065
- SSDEEP
  
  12288:frrjkogdCi7WNwx9l8oEGkuveY39Bn3Y4z9GiC0bZ6SBDo:4ogvWNwmDuXnnI4zUiC09Y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2