ece70fd4c0c293134b6a0bb63531d9bafb7ce196c782fd572c95a7078bcc4237 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f508e23d4b24d8aaa2246b0a36fa5af_JaffaCakes118
Size

316KB
Sample

240520-qp1c1sda2s
MD5

5f508e23d4b24d8aaa2246b0a36fa5af
SHA1

333c968509ca2dc845bbb6b39cfd096c5de98c78
SHA256

ece70fd4c0c293134b6a0bb63531d9bafb7ce196c782fd572c95a7078bcc4237
SHA512

7d59b74c5d154a474922bdc3d04426e9e0f7889cb4291373e142478d719197256e2f94acbb8fc1c3229d5a1f4f87063a959b8eaa24891b040b04dacca6daaa4a
SSDEEP

6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVK:hrkkuveY3zhlV6tmDxzwVK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5f508e23d4b24d8aaa2246b0a36fa5af_JaffaCakes118
- Size
  
  316KB
- MD5
  
  5f508e23d4b24d8aaa2246b0a36fa5af
- SHA1
  
  333c968509ca2dc845bbb6b39cfd096c5de98c78
- SHA256
  
  ece70fd4c0c293134b6a0bb63531d9bafb7ce196c782fd572c95a7078bcc4237
- SHA512
  
  7d59b74c5d154a474922bdc3d04426e9e0f7889cb4291373e142478d719197256e2f94acbb8fc1c3229d5a1f4f87063a959b8eaa24891b040b04dacca6daaa4a
- SSDEEP
  
  6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVK:hrkkuveY3zhlV6tmDxzwVK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2