1f7da7568be9873f3ce2d9830d8fad85091bb9b208ad338311bd3df21c3a6d73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395822e29f1e259bc23b107adf939930_JaffaCakes118
Size

313KB
Sample

240512-k6e6hshd4x
MD5

395822e29f1e259bc23b107adf939930
SHA1

4650327f0bb380acc3272bf2dbaadd4c35fd72b8
SHA256

1f7da7568be9873f3ce2d9830d8fad85091bb9b208ad338311bd3df21c3a6d73
SHA512

4ed01320e68d9d46b6eca091dfbb88ad7ed8e52f21c2c7b49c9cf51ba15952c8166ebf951b44630cc4f17ddd3f83068db3e10bcf01da43ea81e54f71876f3989
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L0y:3ryu6/eIo4vMResyEf0uP9d9UG0B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  395822e29f1e259bc23b107adf939930_JaffaCakes118
- Size
  
  313KB
- MD5
  
  395822e29f1e259bc23b107adf939930
- SHA1
  
  4650327f0bb380acc3272bf2dbaadd4c35fd72b8
- SHA256
  
  1f7da7568be9873f3ce2d9830d8fad85091bb9b208ad338311bd3df21c3a6d73
- SHA512
  
  4ed01320e68d9d46b6eca091dfbb88ad7ed8e52f21c2c7b49c9cf51ba15952c8166ebf951b44630cc4f17ddd3f83068db3e10bcf01da43ea81e54f71876f3989
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L0y:3ryu6/eIo4vMResyEf0uP9d9UG0B
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2