d2e1d87d4149f53243aea38f55900de2c8c6e9e5c4a1ce42eda79f2f3f17e28b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e2179d68f654e86470cb2034bafed20_JaffaCakes118
Size

323KB
Sample

240514-gqj8rade39
MD5

3e2179d68f654e86470cb2034bafed20
SHA1

93decb1c6b83eff24811df50d92e4ccb1554b16a
SHA256

d2e1d87d4149f53243aea38f55900de2c8c6e9e5c4a1ce42eda79f2f3f17e28b
SHA512

1cbfc4f4a85c95ddfd71cf2f6ddad649e8543b624df8cfa45d4c314a955e1a012a5e367d0679e4e07dec71366afefbff82a1593f54bd2faab8fe66b7299428b9
SSDEEP

6144:grV99uEo2S1YnQmCX492DkwNP3qpYFXTqttBv2tHlzLkFyhFOY4vHSMrP:grVDu6/eIo4YOtEyc55ML

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3e2179d68f654e86470cb2034bafed20_JaffaCakes118
- Size
  
  323KB
- MD5
  
  3e2179d68f654e86470cb2034bafed20
- SHA1
  
  93decb1c6b83eff24811df50d92e4ccb1554b16a
- SHA256
  
  d2e1d87d4149f53243aea38f55900de2c8c6e9e5c4a1ce42eda79f2f3f17e28b
- SHA512
  
  1cbfc4f4a85c95ddfd71cf2f6ddad649e8543b624df8cfa45d4c314a955e1a012a5e367d0679e4e07dec71366afefbff82a1593f54bd2faab8fe66b7299428b9
- SSDEEP
  
  6144:grV99uEo2S1YnQmCX492DkwNP3qpYFXTqttBv2tHlzLkFyhFOY4vHSMrP:grVDu6/eIo4YOtEyc55ML
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2