8741d9c6d681e5818ebaf3d4114a0eef018224ccb2273c4589da50150478a924 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

769b41f235a6fc091c168f392bdf154b_JaffaCakes118
Size

327KB
Sample

240526-ye2gbshe5y
MD5

769b41f235a6fc091c168f392bdf154b
SHA1

fad280cc65a018d5fb9f56c107571803a22c0d82
SHA256

8741d9c6d681e5818ebaf3d4114a0eef018224ccb2273c4589da50150478a924
SHA512

6f2999ae1640a1668f943d6666b210da0a3c1fd65535bc4660c1ce5903dbd80635f009b821da2bc228d229e4294bb9b250f2f4adaa827f78dd5552e9efc68672
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fk:Rr4iu6/eIo4Rsw33AtsmQ9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  769b41f235a6fc091c168f392bdf154b_JaffaCakes118
- Size
  
  327KB
- MD5
  
  769b41f235a6fc091c168f392bdf154b
- SHA1
  
  fad280cc65a018d5fb9f56c107571803a22c0d82
- SHA256
  
  8741d9c6d681e5818ebaf3d4114a0eef018224ccb2273c4589da50150478a924
- SHA512
  
  6f2999ae1640a1668f943d6666b210da0a3c1fd65535bc4660c1ce5903dbd80635f009b821da2bc228d229e4294bb9b250f2f4adaa827f78dd5552e9efc68672
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fk:Rr4iu6/eIo4Rsw33AtsmQ9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2