04c7289902c5741adf10fbf390e23954430384f93e16558aae8a025abc3e58cc | Triage

Sharing

General

Target

8cf629e3fef4286598b4cde7054fed0c_JaffaCakes118
Size

325KB
Sample

240602-fn8ynabh6y
MD5

8cf629e3fef4286598b4cde7054fed0c
SHA1

bea602c34c8eaffb3caf24e8ecd981eacd1539d3
SHA256

04c7289902c5741adf10fbf390e23954430384f93e16558aae8a025abc3e58cc
SHA512

796f578362bebc51980f739f3f8aa98b3dfd1bedf3630fa9a3ff21d03b444dc540f1bb290e71cdbecfb75ca13a0d43a1a4e1916813aa2d61c3d3c5515bda59ce
SSDEEP

6144:sr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o+:sr1B3u6/eIo4ArVUBQCCYOqmO5o+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8cf629e3fef4286598b4cde7054fed0c_JaffaCakes118
- Size
  
  325KB
- MD5
  
  8cf629e3fef4286598b4cde7054fed0c
- SHA1
  
  bea602c34c8eaffb3caf24e8ecd981eacd1539d3
- SHA256
  
  04c7289902c5741adf10fbf390e23954430384f93e16558aae8a025abc3e58cc
- SHA512
  
  796f578362bebc51980f739f3f8aa98b3dfd1bedf3630fa9a3ff21d03b444dc540f1bb290e71cdbecfb75ca13a0d43a1a4e1916813aa2d61c3d3c5515bda59ce
- SSDEEP
  
  6144:sr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o+:sr1B3u6/eIo4ArVUBQCCYOqmO5o+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2