3d9b09bae7e6e31e1dab18a66828a6a1ee0f3c593a2eb52512490e81aeb2e785 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3767e583f7597044fee20067807975b2_JaffaCakes118
Size

315KB
Sample

240512-a8waeabf52
MD5

3767e583f7597044fee20067807975b2
SHA1

34ee78c84d56e2902775730cdb73ce6402f39fd7
SHA256

3d9b09bae7e6e31e1dab18a66828a6a1ee0f3c593a2eb52512490e81aeb2e785
SHA512

0949d061a91dabe111124116f804292344e5bbfe427aff2d02f409477240b90c262cc7d4abf77ab82b7086466adae24679e928252a53747dcb2ce7f487fe3e87
SSDEEP

6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZK:srdkuveY3CvI5Zdkj6OEu1HSK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3767e583f7597044fee20067807975b2_JaffaCakes118
- Size
  
  315KB
- MD5
  
  3767e583f7597044fee20067807975b2
- SHA1
  
  34ee78c84d56e2902775730cdb73ce6402f39fd7
- SHA256
  
  3d9b09bae7e6e31e1dab18a66828a6a1ee0f3c593a2eb52512490e81aeb2e785
- SHA512
  
  0949d061a91dabe111124116f804292344e5bbfe427aff2d02f409477240b90c262cc7d4abf77ab82b7086466adae24679e928252a53747dcb2ce7f487fe3e87
- SSDEEP
  
  6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZK:srdkuveY3CvI5Zdkj6OEu1HSK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2