11dca229baaac37080868fea9cbde279936f34c18dc5878d507e226e1e6cfda3 | Triage

Sharing

General

Target

4c7dc768a47ee940e0298cbf444216e6_JaffaCakes118
Size

313KB
Sample

240516-w9srkaad58
MD5

4c7dc768a47ee940e0298cbf444216e6
SHA1

0ceb9380abfc8860e96f3196e2ea18812f3547db
SHA256

11dca229baaac37080868fea9cbde279936f34c18dc5878d507e226e1e6cfda3
SHA512

ab29da4097f3d8e359b73210e14f825f4aa774eb89428ce4a252dc765a1cab639b5ac1e0c585e1bea035031d5a647a0841a2550a4516c4ef54c13091dbb9369f
SSDEEP

6144:Ura9uEo2S1YnQmCX492DkwNP3qpYFl0Gf2w5E9mOx/riU7obOeuDZTDDCXhqLkw8:UrCu6/eIo4ykigxOeneqZGh6Ch

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4c7dc768a47ee940e0298cbf444216e6_JaffaCakes118
- Size
  
  313KB
- MD5
  
  4c7dc768a47ee940e0298cbf444216e6
- SHA1
  
  0ceb9380abfc8860e96f3196e2ea18812f3547db
- SHA256
  
  11dca229baaac37080868fea9cbde279936f34c18dc5878d507e226e1e6cfda3
- SHA512
  
  ab29da4097f3d8e359b73210e14f825f4aa774eb89428ce4a252dc765a1cab639b5ac1e0c585e1bea035031d5a647a0841a2550a4516c4ef54c13091dbb9369f
- SSDEEP
  
  6144:Ura9uEo2S1YnQmCX492DkwNP3qpYFl0Gf2w5E9mOx/riU7obOeuDZTDDCXhqLkw8:UrCu6/eIo4ykigxOeneqZGh6Ch
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2