1309325d325413ef49152c657e9bcf0a5638a74de51892dbc9072c9c047cd304 | Triage

Sharing

General

Target

4eec2695db86bd713636c4d34867e88a_JaffaCakes118
Size

324KB
Sample

240517-hwcxaseg61
MD5

4eec2695db86bd713636c4d34867e88a
SHA1

1ff88a42a78641aa1b3057946d65524ba358eedd
SHA256

1309325d325413ef49152c657e9bcf0a5638a74de51892dbc9072c9c047cd304
SHA512

8f954fbfa9a34e39191121b0f0d2bba545f792984624993cd2a0309f0e96c41e86f18caa5b910868fec690d4e3771a11a547014b2073db0d2674fd10da457842
SSDEEP

6144:WxebA+raHjBXJXJc3GuffBtRQ2pWnfQVLznX3:iYA0aHtX/c1fdQ2cnfQBX3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4eec2695db86bd713636c4d34867e88a_JaffaCakes118
- Size
  
  324KB
- MD5
  
  4eec2695db86bd713636c4d34867e88a
- SHA1
  
  1ff88a42a78641aa1b3057946d65524ba358eedd
- SHA256
  
  1309325d325413ef49152c657e9bcf0a5638a74de51892dbc9072c9c047cd304
- SHA512
  
  8f954fbfa9a34e39191121b0f0d2bba545f792984624993cd2a0309f0e96c41e86f18caa5b910868fec690d4e3771a11a547014b2073db0d2674fd10da457842
- SSDEEP
  
  6144:WxebA+raHjBXJXJc3GuffBtRQ2pWnfQVLznX3:iYA0aHtX/c1fdQ2cnfQBX3
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2