cd542e791b281d63cc7a554b35403cf026433d60e78258310b35e11f28764d09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d4e6c776d797e097a8f18f1474b1a1a_JaffaCakes118
Size

312KB
Sample

240602-h9trzafe43
MD5

8d4e6c776d797e097a8f18f1474b1a1a
SHA1

802e0cbb5d269971c5ca185aef678393d6ffc2ea
SHA256

cd542e791b281d63cc7a554b35403cf026433d60e78258310b35e11f28764d09
SHA512

954e4682517cd378fb8a5856bcaec2954baa60bff81c574d77703310054a436c2a53eb14ab6cd90aec5ec511dd8f649529b9418b7f90d98d10a797cec87311ff
SSDEEP

6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iic:xrkau6/eIo43ts7KcXgXAN7id

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8d4e6c776d797e097a8f18f1474b1a1a_JaffaCakes118
- Size
  
  312KB
- MD5
  
  8d4e6c776d797e097a8f18f1474b1a1a
- SHA1
  
  802e0cbb5d269971c5ca185aef678393d6ffc2ea
- SHA256
  
  cd542e791b281d63cc7a554b35403cf026433d60e78258310b35e11f28764d09
- SHA512
  
  954e4682517cd378fb8a5856bcaec2954baa60bff81c574d77703310054a436c2a53eb14ab6cd90aec5ec511dd8f649529b9418b7f90d98d10a797cec87311ff
- SSDEEP
  
  6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iic:xrkau6/eIo43ts7KcXgXAN7id
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2