b8e39ea973fad57b78d36ac3d79db4b099b6db823563b76e1225f26bc6ea21ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

846dcdc1908e3a14f42505a923bc7e33_JaffaCakes118
Size

304KB
Sample

240530-rjkaaabc5v
MD5

846dcdc1908e3a14f42505a923bc7e33
SHA1

88dcb5f977a4c73f35932ac990980c728fd0e5eb
SHA256

b8e39ea973fad57b78d36ac3d79db4b099b6db823563b76e1225f26bc6ea21ba
SHA512

60991b0944ece386c8857d5ebb7250a3aa1425988c3a66c1999a680eb76ca87538750135f49021a490c4952874624758ef05ab4660725345d9f487fca07d4c9b
SSDEEP

6144:MrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:Mrkuu6/eIo4tQW62T+uTwM6YVxm24t

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  846dcdc1908e3a14f42505a923bc7e33_JaffaCakes118
- Size
  
  304KB
- MD5
  
  846dcdc1908e3a14f42505a923bc7e33
- SHA1
  
  88dcb5f977a4c73f35932ac990980c728fd0e5eb
- SHA256
  
  b8e39ea973fad57b78d36ac3d79db4b099b6db823563b76e1225f26bc6ea21ba
- SHA512
  
  60991b0944ece386c8857d5ebb7250a3aa1425988c3a66c1999a680eb76ca87538750135f49021a490c4952874624758ef05ab4660725345d9f487fca07d4c9b
- SSDEEP
  
  6144:MrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:Mrkuu6/eIo4tQW62T+uTwM6YVxm24t
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2