290f6056996f46ab9dc855f37811b3c1438640dcad4446eaa359f284d8908704 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cfa1d3a6624c2a45b59000edd1efbaa_JaffaCakes118
Size

327KB
Sample

240602-frzt6acf33
MD5

8cfa1d3a6624c2a45b59000edd1efbaa
SHA1

2ce92c7a36f46bb4fca4287c94a8bd98417bfbe1
SHA256

290f6056996f46ab9dc855f37811b3c1438640dcad4446eaa359f284d8908704
SHA512

7a197350c994d06b7b0bfedeac626b5fa1a3257cb9b43607b11ee3f1f0405daf77fc8da25c9cea6cc3bfc70e8ffe15400dc58b02b066b17c08a5394dc8085058
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3:Zr4iu6/eIo4Rsw33AtsmQe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8cfa1d3a6624c2a45b59000edd1efbaa_JaffaCakes118
- Size
  
  327KB
- MD5
  
  8cfa1d3a6624c2a45b59000edd1efbaa
- SHA1
  
  2ce92c7a36f46bb4fca4287c94a8bd98417bfbe1
- SHA256
  
  290f6056996f46ab9dc855f37811b3c1438640dcad4446eaa359f284d8908704
- SHA512
  
  7a197350c994d06b7b0bfedeac626b5fa1a3257cb9b43607b11ee3f1f0405daf77fc8da25c9cea6cc3bfc70e8ffe15400dc58b02b066b17c08a5394dc8085058
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3:Zr4iu6/eIo4Rsw33AtsmQe
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2