9e54a0d87e8a872022624bf66b7f7ea0a7014b2ddca3719cd500932d36f810c8 | Triage

Sharing

General

Target

7136be59ee251f976fc005a97a5565ce_JaffaCakes118
Size

313KB
Sample

240525-hzhxqaab8x
MD5

7136be59ee251f976fc005a97a5565ce
SHA1

2aa8959be556b8e8f8b947075a0df1b8424e4c22
SHA256

9e54a0d87e8a872022624bf66b7f7ea0a7014b2ddca3719cd500932d36f810c8
SHA512

392edb4d224cd6469e93af4eba3af0ea9f8d42eedc0ab83713e77b9078ae0a4221ebc8784e9e23c1b62cd6b48f08f6b2181749dbeb52473c4b26ab09c0d6def0
SSDEEP

6144:fro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94dN:frAu6/eIo4s1yR9lsc/adN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7136be59ee251f976fc005a97a5565ce_JaffaCakes118
- Size
  
  313KB
- MD5
  
  7136be59ee251f976fc005a97a5565ce
- SHA1
  
  2aa8959be556b8e8f8b947075a0df1b8424e4c22
- SHA256
  
  9e54a0d87e8a872022624bf66b7f7ea0a7014b2ddca3719cd500932d36f810c8
- SHA512
  
  392edb4d224cd6469e93af4eba3af0ea9f8d42eedc0ab83713e77b9078ae0a4221ebc8784e9e23c1b62cd6b48f08f6b2181749dbeb52473c4b26ab09c0d6def0
- SSDEEP
  
  6144:fro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94dN:frAu6/eIo4s1yR9lsc/adN
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2