14a86e685d13ee936289132ce94a48b10855da495a15e56b5502f97a96944b6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c608b82f6010cd67960fb92b3aa1de8_JaffaCakes118
Size

258KB
Sample

240520-bc9nlacb97
MD5

5c608b82f6010cd67960fb92b3aa1de8
SHA1

47c8e40a7f0cd913cad4e356bd670d5a68312710
SHA256

14a86e685d13ee936289132ce94a48b10855da495a15e56b5502f97a96944b6d
SHA512

9fcab055cb1e678a53c8cae41ed754fcfada1ec432148e04b926c5257481beaa297228c7960ffc61a083b34d76cdf6c82de3b042c2d8ac2557e75f5b7947c171
SSDEEP

3072:cnRUwy3nA5CvMN1o/SJax49EAYBRX4kIPd5WEXk8SYXCXFqaw0FCtRGuWeK1U:cywyXAg0HMaMln4v5WE0JQCnwrgheKe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c608b82f6010cd67960fb92b3aa1de8_JaffaCakes118
- Size
  
  258KB
- MD5
  
  5c608b82f6010cd67960fb92b3aa1de8
- SHA1
  
  47c8e40a7f0cd913cad4e356bd670d5a68312710
- SHA256
  
  14a86e685d13ee936289132ce94a48b10855da495a15e56b5502f97a96944b6d
- SHA512
  
  9fcab055cb1e678a53c8cae41ed754fcfada1ec432148e04b926c5257481beaa297228c7960ffc61a083b34d76cdf6c82de3b042c2d8ac2557e75f5b7947c171
- SSDEEP
  
  3072:cnRUwy3nA5CvMN1o/SJax49EAYBRX4kIPd5WEXk8SYXCXFqaw0FCtRGuWeK1U:cywyXAg0HMaMln4v5WE0JQCnwrgheKe
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2