43e5040905b1efdcaf52b5a3acaa4d08ee0a6b972478cb18797f2e21e82499fe | Triage

Sharing

General

Target

952483ee3ecbfc553fa8eedaf7e35125_JaffaCakes118
Size

313KB
Sample

240604-rk5ydaaa3w
MD5

952483ee3ecbfc553fa8eedaf7e35125
SHA1

dc92d18fef344588968f93a5033ffed85951a48c
SHA256

43e5040905b1efdcaf52b5a3acaa4d08ee0a6b972478cb18797f2e21e82499fe
SHA512

d456bb35100604ae7bf1dd4498f4f2d8e5cc59bd61133bcfb185c0cd7b85f65287f523a185f56ec7dc4cbf28ad3cd330048c3d4c4541753ab9536013770ab013
SSDEEP

6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Ld:/ryu6/eIo4vMResyEf0uP9d9UG0d

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  952483ee3ecbfc553fa8eedaf7e35125_JaffaCakes118
- Size
  
  313KB
- MD5
  
  952483ee3ecbfc553fa8eedaf7e35125
- SHA1
  
  dc92d18fef344588968f93a5033ffed85951a48c
- SHA256
  
  43e5040905b1efdcaf52b5a3acaa4d08ee0a6b972478cb18797f2e21e82499fe
- SHA512
  
  d456bb35100604ae7bf1dd4498f4f2d8e5cc59bd61133bcfb185c0cd7b85f65287f523a185f56ec7dc4cbf28ad3cd330048c3d4c4541753ab9536013770ab013
- SSDEEP
  
  6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Ld:/ryu6/eIo4vMResyEf0uP9d9UG0d
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2