84f98bfcb18882da941fb69d7b73054dbb45265684e6ab49d29eba472e5afe7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40a6a6836d2f46eb2298ebab5e3fc8ae_JaffaCakes118
Size

326KB
Sample

240514-h4cw9sfc22
MD5

40a6a6836d2f46eb2298ebab5e3fc8ae
SHA1

e63950005bfadbf934aed4ec2a0e10a21f5c37c3
SHA256

84f98bfcb18882da941fb69d7b73054dbb45265684e6ab49d29eba472e5afe7f
SHA512

084b3bd610e334bee801e3a97be718872930fa312e5dd1ed8d3d14d779246749b71534af2ef43d329cce05199e35807ea9de8e32e8238519fb4c91807a7b8e6a
SSDEEP

6144:2r469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmaH:2r4iu6/eIo44O0W2UY2yyH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  40a6a6836d2f46eb2298ebab5e3fc8ae_JaffaCakes118
- Size
  
  326KB
- MD5
  
  40a6a6836d2f46eb2298ebab5e3fc8ae
- SHA1
  
  e63950005bfadbf934aed4ec2a0e10a21f5c37c3
- SHA256
  
  84f98bfcb18882da941fb69d7b73054dbb45265684e6ab49d29eba472e5afe7f
- SHA512
  
  084b3bd610e334bee801e3a97be718872930fa312e5dd1ed8d3d14d779246749b71534af2ef43d329cce05199e35807ea9de8e32e8238519fb4c91807a7b8e6a
- SSDEEP
  
  6144:2r469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmaH:2r4iu6/eIo44O0W2UY2yyH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2