396be840ced581c6b42c8b0f7259ee50aaaef445cb9672e6f7b204e8e011ac0f | Triage

Sharing

General

Target

47f0ef39df1eb474b375c6f386a39d3a_JaffaCakes118
Size

327KB
Sample

240515-zfngjaah21
MD5

47f0ef39df1eb474b375c6f386a39d3a
SHA1

34c391fc40018ce19aef601b7ae25a20dec0ae65
SHA256

396be840ced581c6b42c8b0f7259ee50aaaef445cb9672e6f7b204e8e011ac0f
SHA512

5ec7c063aa6c4025a1c1ca6b54fbcd1cbea17e435c5c1ffddb22f87d06ee19373e4d503a258bc234fad9fcade5c78051be9cc8a1c521e38c1bbfea7639b04863
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:hr4iu6/eIo4Rsw33AtsmQT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  47f0ef39df1eb474b375c6f386a39d3a_JaffaCakes118
- Size
  
  327KB
- MD5
  
  47f0ef39df1eb474b375c6f386a39d3a
- SHA1
  
  34c391fc40018ce19aef601b7ae25a20dec0ae65
- SHA256
  
  396be840ced581c6b42c8b0f7259ee50aaaef445cb9672e6f7b204e8e011ac0f
- SHA512
  
  5ec7c063aa6c4025a1c1ca6b54fbcd1cbea17e435c5c1ffddb22f87d06ee19373e4d503a258bc234fad9fcade5c78051be9cc8a1c521e38c1bbfea7639b04863
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:hr4iu6/eIo4Rsw33AtsmQT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2