223357e62683c5f734aca39144161adfed3bfb695c6917cd9e93297a4cb6443e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4be4f8cdd10eafd5dc3142a2a5d3836a_JaffaCakes118
Size

313KB
Sample

240516-te3xyacb9t
MD5

4be4f8cdd10eafd5dc3142a2a5d3836a
SHA1

e35a8bc106e4f269b4fff02683365d41418cfc0a
SHA256

223357e62683c5f734aca39144161adfed3bfb695c6917cd9e93297a4cb6443e
SHA512

192a01a1ab67c0581f3a45be0e531e8fec9ebc959069980eefc8785cb3c849f5a21ad3ca708d55d22a746bbb193816f6a41cefd00f329e02db73e74b0aa1b4cb
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lw:Hryu6/eIo4vMResyEf0uP9d9UG0w

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4be4f8cdd10eafd5dc3142a2a5d3836a_JaffaCakes118
- Size
  
  313KB
- MD5
  
  4be4f8cdd10eafd5dc3142a2a5d3836a
- SHA1
  
  e35a8bc106e4f269b4fff02683365d41418cfc0a
- SHA256
  
  223357e62683c5f734aca39144161adfed3bfb695c6917cd9e93297a4cb6443e
- SHA512
  
  192a01a1ab67c0581f3a45be0e531e8fec9ebc959069980eefc8785cb3c849f5a21ad3ca708d55d22a746bbb193816f6a41cefd00f329e02db73e74b0aa1b4cb
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lw:Hryu6/eIo4vMResyEf0uP9d9UG0w
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2