210d39f412172938f4e002b01c80d3795d5e309be8534c160df243f4070a4a1e | Triage

Sharing

General

Target

65bd912381dd9276647436ca34d42c26_JaffaCakes118
Size

259KB
Sample

240522-c8p5haaa51
MD5

65bd912381dd9276647436ca34d42c26
SHA1

fde2f35bec38cbc072561904468020f25de2056f
SHA256

210d39f412172938f4e002b01c80d3795d5e309be8534c160df243f4070a4a1e
SHA512

e4b59f99561dbd412396f435921974c7f2733ddf0e8dade8b5ea978efb2b7e5b95a6b82ccba6c22336c310b219079c263d3df78a4b856f91053b960cce76d410
SSDEEP

3072:YpsYcy4YCvpP7iEC5EatstKaWpWyUw3dWjR4bT5WsCYjItO8WOz3CZB:YpT4/Ju9tq0rUw3AR4b4Cje3CZB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  65bd912381dd9276647436ca34d42c26_JaffaCakes118
- Size
  
  259KB
- MD5
  
  65bd912381dd9276647436ca34d42c26
- SHA1
  
  fde2f35bec38cbc072561904468020f25de2056f
- SHA256
  
  210d39f412172938f4e002b01c80d3795d5e309be8534c160df243f4070a4a1e
- SHA512
  
  e4b59f99561dbd412396f435921974c7f2733ddf0e8dade8b5ea978efb2b7e5b95a6b82ccba6c22336c310b219079c263d3df78a4b856f91053b960cce76d410
- SSDEEP
  
  3072:YpsYcy4YCvpP7iEC5EatstKaWpWyUw3dWjR4bT5WsCYjItO8WOz3CZB:YpT4/Ju9tq0rUw3AR4b4Cje3CZB
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2