ea4cf9f42b192c6e6b2ca51d1b2a90ec12b61f5c91b1f4e72990e7737944d17b | Triage

Sharing

General

Target

8648f527ac5c5d68768d3730d811209a_JaffaCakes118
Size

315KB
Sample

240531-jat45abh69
MD5

8648f527ac5c5d68768d3730d811209a
SHA1

d539e562869cfba6ae297ff44f739282e1f6f432
SHA256

ea4cf9f42b192c6e6b2ca51d1b2a90ec12b61f5c91b1f4e72990e7737944d17b
SHA512

0cecc7980bc6eb87c809770b2af5cdd389126e024512574d5faf598c9f9cc68f14a7d08334d4cc0be2d52e37b819d23f9ae9073e38bc63d07867dd4b39cd97de
SSDEEP

6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ1:srdkuveY3CvI5Zdkj6OEu1HS1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8648f527ac5c5d68768d3730d811209a_JaffaCakes118
- Size
  
  315KB
- MD5
  
  8648f527ac5c5d68768d3730d811209a
- SHA1
  
  d539e562869cfba6ae297ff44f739282e1f6f432
- SHA256
  
  ea4cf9f42b192c6e6b2ca51d1b2a90ec12b61f5c91b1f4e72990e7737944d17b
- SHA512
  
  0cecc7980bc6eb87c809770b2af5cdd389126e024512574d5faf598c9f9cc68f14a7d08334d4cc0be2d52e37b819d23f9ae9073e38bc63d07867dd4b39cd97de
- SSDEEP
  
  6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ1:srdkuveY3CvI5Zdkj6OEu1HS1
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2