14d648e51a8731e74e4c1b9b3b71c6d07ce7e50bad7598517b1db0e8ea83a673 | Triage

Sharing

General

Target

68e70d22ac6f79f687a59f1bf652cbe6_JaffaCakes118
Size

313KB
Sample

240522-2rygzsca47
MD5

68e70d22ac6f79f687a59f1bf652cbe6
SHA1

c5811fcf946007facc111e2f217e389162482178
SHA256

14d648e51a8731e74e4c1b9b3b71c6d07ce7e50bad7598517b1db0e8ea83a673
SHA512

8d08ea38cd0034a70601ab267b9cb6152876cb3e6f9079bb62252bcc77b44a44bc97d62893c76c9c7408363aedaa8c16b7b843276ac95bedf8e28a90fac7061a
SSDEEP

6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lc:nryu6/eIo4vMResyEf0uP9d9UG0c

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  68e70d22ac6f79f687a59f1bf652cbe6_JaffaCakes118
- Size
  
  313KB
- MD5
  
  68e70d22ac6f79f687a59f1bf652cbe6
- SHA1
  
  c5811fcf946007facc111e2f217e389162482178
- SHA256
  
  14d648e51a8731e74e4c1b9b3b71c6d07ce7e50bad7598517b1db0e8ea83a673
- SHA512
  
  8d08ea38cd0034a70601ab267b9cb6152876cb3e6f9079bb62252bcc77b44a44bc97d62893c76c9c7408363aedaa8c16b7b843276ac95bedf8e28a90fac7061a
- SSDEEP
  
  6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lc:nryu6/eIo4vMResyEf0uP9d9UG0c
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2