20f0cfd977c69036f4ea0a312fde24f0848aff1cc14aed3ca0eec26f0a06e9c1 | Triage

Sharing

General

Target

6a17973cdae5d54573599f77f69fdc9b_JaffaCakes118
Size

254KB
Sample

240523-hlzy3sgg4t
MD5

6a17973cdae5d54573599f77f69fdc9b
SHA1

99832a87aaea77305018fe2f092f180be4dcddcf
SHA256

20f0cfd977c69036f4ea0a312fde24f0848aff1cc14aed3ca0eec26f0a06e9c1
SHA512

84b9432c6e772761b77cb28bd35c87219cee7c143c8afbc2d8692b68646957e856ed4c4e536eaaee548d5a9dd006f635963f4093244ba8067629ab9e90ebeba7
SSDEEP

6144:oUCvnbFW3ZNHtk2mIDqH12hvHz+BW08r2y:rCPRur5DqayWNr2y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6a17973cdae5d54573599f77f69fdc9b_JaffaCakes118
- Size
  
  254KB
- MD5
  
  6a17973cdae5d54573599f77f69fdc9b
- SHA1
  
  99832a87aaea77305018fe2f092f180be4dcddcf
- SHA256
  
  20f0cfd977c69036f4ea0a312fde24f0848aff1cc14aed3ca0eec26f0a06e9c1
- SHA512
  
  84b9432c6e772761b77cb28bd35c87219cee7c143c8afbc2d8692b68646957e856ed4c4e536eaaee548d5a9dd006f635963f4093244ba8067629ab9e90ebeba7
- SSDEEP
  
  6144:oUCvnbFW3ZNHtk2mIDqH12hvHz+BW08r2y:rCPRur5DqayWNr2y
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2