34eadbf35ae40a235213f0150b188da64c7ed98c74114ace450b07980882c4bd | Triage

Sharing

General

Target

3934f26be20dba4b8d631e0f97fa116a_JaffaCakes118
Size

314KB
Sample

240512-kg51msbf55
MD5

3934f26be20dba4b8d631e0f97fa116a
SHA1

3de2d0ca2f1379dc6c4f7e5b75aff7f888033c01
SHA256

34eadbf35ae40a235213f0150b188da64c7ed98c74114ace450b07980882c4bd
SHA512

ded1a8f04eee8172115710e4b8b2a975b541d6f247318ef0b3cad0df0bdccc509095d7261a2d06b2ac183b1d8e00ec3a07e5f66f7f8ec333561b0d199b86e9cc
SSDEEP

6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwa:Qr1kuveY35YO67Wxz7wa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3934f26be20dba4b8d631e0f97fa116a_JaffaCakes118
- Size
  
  314KB
- MD5
  
  3934f26be20dba4b8d631e0f97fa116a
- SHA1
  
  3de2d0ca2f1379dc6c4f7e5b75aff7f888033c01
- SHA256
  
  34eadbf35ae40a235213f0150b188da64c7ed98c74114ace450b07980882c4bd
- SHA512
  
  ded1a8f04eee8172115710e4b8b2a975b541d6f247318ef0b3cad0df0bdccc509095d7261a2d06b2ac183b1d8e00ec3a07e5f66f7f8ec333561b0d199b86e9cc
- SSDEEP
  
  6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwa:Qr1kuveY35YO67Wxz7wa
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2