207d917e7872e673b14c62f6706f9534e779f42548ab07b32581e2d3f0f031b0 | Triage

Sharing

General

Target

74e7b00c5d76060ae48b1f75dad46ef9_JaffaCakes118
Size

313KB
Sample

240526-kjxr2scf4s
MD5

74e7b00c5d76060ae48b1f75dad46ef9
SHA1

aaeef30c70c522bb37a58c8322305f542c83355c
SHA256

207d917e7872e673b14c62f6706f9534e779f42548ab07b32581e2d3f0f031b0
SHA512

99ec19e64633135d795998d13b4722ba5352394c900a2c1f001a4b5414e7147c2a894c0a80de64bf34069c1228c2cc6e3fa3156a99f1fbe2ae1ab46058cf20c6
SSDEEP

6144:xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMM:xrRu6/eIo4t3PuFITKUAH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  74e7b00c5d76060ae48b1f75dad46ef9_JaffaCakes118
- Size
  
  313KB
- MD5
  
  74e7b00c5d76060ae48b1f75dad46ef9
- SHA1
  
  aaeef30c70c522bb37a58c8322305f542c83355c
- SHA256
  
  207d917e7872e673b14c62f6706f9534e779f42548ab07b32581e2d3f0f031b0
- SHA512
  
  99ec19e64633135d795998d13b4722ba5352394c900a2c1f001a4b5414e7147c2a894c0a80de64bf34069c1228c2cc6e3fa3156a99f1fbe2ae1ab46058cf20c6
- SSDEEP
  
  6144:xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMM:xrRu6/eIo4t3PuFITKUAH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2