6e8fb6964db965c96dabd07b93e65ed4479d8300be8e65911a6583bd22a07697 | Triage

Sharing

General

Target

40ab04d80c06195749b5426079795f27_JaffaCakes118
Size

313KB
Sample

240514-h7zkfafa3v
MD5

40ab04d80c06195749b5426079795f27
SHA1

b293e8a1620faae899a8e4ecebed4997237316bb
SHA256

6e8fb6964db965c96dabd07b93e65ed4479d8300be8e65911a6583bd22a07697
SHA512

eae43798bb0c0542978c90d685fec2d8835686d64fdc3f06cfe7a146509297ca88798d0e661b1dc7b1d2ed5c268e2175520e7ce9fa0e230f68cb8271166e3839
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYV:Ark4u6/eIo4nlu7trxFtApfgMyrpjYV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  40ab04d80c06195749b5426079795f27_JaffaCakes118
- Size
  
  313KB
- MD5
  
  40ab04d80c06195749b5426079795f27
- SHA1
  
  b293e8a1620faae899a8e4ecebed4997237316bb
- SHA256
  
  6e8fb6964db965c96dabd07b93e65ed4479d8300be8e65911a6583bd22a07697
- SHA512
  
  eae43798bb0c0542978c90d685fec2d8835686d64fdc3f06cfe7a146509297ca88798d0e661b1dc7b1d2ed5c268e2175520e7ce9fa0e230f68cb8271166e3839
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYV:Ark4u6/eIo4nlu7trxFtApfgMyrpjYV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2