bad8de62dbd71f49fe416da7f9d702c5664df17ac5194882b626b45fbff935e2 | Triage

Sharing

General

Target

968cd312de1627ca19a67d1e6678443a_JaffaCakes118
Size

316KB
Sample

240604-22m41afc65
MD5

968cd312de1627ca19a67d1e6678443a
SHA1

6ed0d05ed94bf82762fe7154890311c338fa1d8f
SHA256

bad8de62dbd71f49fe416da7f9d702c5664df17ac5194882b626b45fbff935e2
SHA512

d511865fd76d9dc1ba4991ee7c8afeb2b8454bcbf458d3e88a61de756541c6e4b74eb0c593f49933385a702b8f087adc05a1e83bf0451513512146bf45be3d0a
SSDEEP

6144:zr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYv:zr0kuveY3cY1cia66MGd0Vs9BdNo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  968cd312de1627ca19a67d1e6678443a_JaffaCakes118
- Size
  
  316KB
- MD5
  
  968cd312de1627ca19a67d1e6678443a
- SHA1
  
  6ed0d05ed94bf82762fe7154890311c338fa1d8f
- SHA256
  
  bad8de62dbd71f49fe416da7f9d702c5664df17ac5194882b626b45fbff935e2
- SHA512
  
  d511865fd76d9dc1ba4991ee7c8afeb2b8454bcbf458d3e88a61de756541c6e4b74eb0c593f49933385a702b8f087adc05a1e83bf0451513512146bf45be3d0a
- SSDEEP
  
  6144:zr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYv:zr0kuveY3cY1cia66MGd0Vs9BdNo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2