10806bd85cbcda743c4b46b9415f28d6715a46412553409945bb1cf8211f3231 | Triage

Sharing

General

Target

95bd202e66313a65f3821f30d8a7951a_JaffaCakes118
Size

322KB
Sample

240604-wftf1afa75
MD5

95bd202e66313a65f3821f30d8a7951a
SHA1

6eafb4ae82836627daf0dd5083c7b37012abba78
SHA256

10806bd85cbcda743c4b46b9415f28d6715a46412553409945bb1cf8211f3231
SHA512

f9646247539dee55871c46a4d4d897c8c0c507e188983b1739c510c416e58399554156fe94d3e1338e585b97568470c4f5555fbef3ebfab32a73562b96d3fe3e
SSDEEP

6144:ArV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcn:ArVQu6/eIo4qQdF8lEeXK11AZDqUmpn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  95bd202e66313a65f3821f30d8a7951a_JaffaCakes118
- Size
  
  322KB
- MD5
  
  95bd202e66313a65f3821f30d8a7951a
- SHA1
  
  6eafb4ae82836627daf0dd5083c7b37012abba78
- SHA256
  
  10806bd85cbcda743c4b46b9415f28d6715a46412553409945bb1cf8211f3231
- SHA512
  
  f9646247539dee55871c46a4d4d897c8c0c507e188983b1739c510c416e58399554156fe94d3e1338e585b97568470c4f5555fbef3ebfab32a73562b96d3fe3e
- SSDEEP
  
  6144:ArV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcn:ArVQu6/eIo4qQdF8lEeXK11AZDqUmpn
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2