12eecf285cbcc5065fbcd9258b6876608172994c105f94f5f0c83692c48838fe | Triage

Sharing

General

Target

3fd67dc94b1a595639d9bb75350bbf11_JaffaCakes118
Size

258KB
Sample

240513-redxpshf9t
MD5

3fd67dc94b1a595639d9bb75350bbf11
SHA1

c0e4a73803d03523a7358706f2f962774c913542
SHA256

12eecf285cbcc5065fbcd9258b6876608172994c105f94f5f0c83692c48838fe
SHA512

4a68246b25dcf558f2266d187342cd958b40bdc03fa451f2c9f14a5092b861ae0c2819e171a9cde9f6db8a5e40fb6d30f0695d1cf263e261899416c52f621a7a
SSDEEP

3072:OvcP6pi6fZbv4c9nhaWE7ZA9msMG4qBMBlOreNh4s7GsPQtxXpaqXIVZUuaXwRHr:OvcPkfVzW2m5qOl2e0sk5aqXSZUzX4Hr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3fd67dc94b1a595639d9bb75350bbf11_JaffaCakes118
- Size
  
  258KB
- MD5
  
  3fd67dc94b1a595639d9bb75350bbf11
- SHA1
  
  c0e4a73803d03523a7358706f2f962774c913542
- SHA256
  
  12eecf285cbcc5065fbcd9258b6876608172994c105f94f5f0c83692c48838fe
- SHA512
  
  4a68246b25dcf558f2266d187342cd958b40bdc03fa451f2c9f14a5092b861ae0c2819e171a9cde9f6db8a5e40fb6d30f0695d1cf263e261899416c52f621a7a
- SSDEEP
  
  3072:OvcP6pi6fZbv4c9nhaWE7ZA9msMG4qBMBlOreNh4s7GsPQtxXpaqXIVZUuaXwRHr:OvcPkfVzW2m5qOl2e0sk5aqXSZUzX4Hr
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2