da7b9e9de63aa2770bc9751458db2b263bf2263f73466709df651f5f57ae0fea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e1768770febcab6dc2462702cd7dfd2_JaffaCakes118
Size

316KB
Sample

240517-c856qadg3x
MD5

4e1768770febcab6dc2462702cd7dfd2
SHA1

419f95def2c328ebbd36f61f69a25da994b4521e
SHA256

da7b9e9de63aa2770bc9751458db2b263bf2263f73466709df651f5f57ae0fea
SHA512

40900e95cd652bf42597fa124d7a252d783ef0405b1f9ac26d490308260d795629479aca52fade495d8aa27c4366b49ec8d2052a23b56850d61eedcc034e0b5d
SSDEEP

6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xo:ir7kuveY33FJUo7MDkA6B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4e1768770febcab6dc2462702cd7dfd2_JaffaCakes118
- Size
  
  316KB
- MD5
  
  4e1768770febcab6dc2462702cd7dfd2
- SHA1
  
  419f95def2c328ebbd36f61f69a25da994b4521e
- SHA256
  
  da7b9e9de63aa2770bc9751458db2b263bf2263f73466709df651f5f57ae0fea
- SHA512
  
  40900e95cd652bf42597fa124d7a252d783ef0405b1f9ac26d490308260d795629479aca52fade495d8aa27c4366b49ec8d2052a23b56850d61eedcc034e0b5d
- SSDEEP
  
  6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xo:ir7kuveY33FJUo7MDkA6B
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2