6e83dfac1c00410925e09958b3fcc70ed10d7fa69e2ba810eb9bcfc7d67752ee | Triage

Sharing

General

Target

69fbf249854234e610036f6f68a9bcf7_JaffaCakes118
Size

327KB
Sample

240523-gvzt1aga4t
MD5

69fbf249854234e610036f6f68a9bcf7
SHA1

cb2dcf388fd5dd8ec20a9cbf32de435b843a493f
SHA256

6e83dfac1c00410925e09958b3fcc70ed10d7fa69e2ba810eb9bcfc7d67752ee
SHA512

d45381ebfb14157d708d76ac1da4436f0eed434deaca4916dec770434cc6a76cdd0115193f869cc6ae5aa4b8570087e926d4d2c8d0287e62079ec09b0526ea45
SSDEEP

6144:5r469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FD:5r4iu6/eIo4Rsw33AtsmQy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  69fbf249854234e610036f6f68a9bcf7_JaffaCakes118
- Size
  
  327KB
- MD5
  
  69fbf249854234e610036f6f68a9bcf7
- SHA1
  
  cb2dcf388fd5dd8ec20a9cbf32de435b843a493f
- SHA256
  
  6e83dfac1c00410925e09958b3fcc70ed10d7fa69e2ba810eb9bcfc7d67752ee
- SHA512
  
  d45381ebfb14157d708d76ac1da4436f0eed434deaca4916dec770434cc6a76cdd0115193f869cc6ae5aa4b8570087e926d4d2c8d0287e62079ec09b0526ea45
- SSDEEP
  
  6144:5r469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FD:5r4iu6/eIo4Rsw33AtsmQy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2