169af01078c3177f38dd0e7ba27e07491893a0b3dd485f810766d1df8ccd4536 | Triage

Sharing

General

Target

95ebbe704ee623fbdc4384e50d3e5c21_JaffaCakes118
Size

325KB
Sample

240604-xljpesgb7z
MD5

95ebbe704ee623fbdc4384e50d3e5c21
SHA1

e127378a91282de0c5768767bc79b1d8fc4e7a9d
SHA256

169af01078c3177f38dd0e7ba27e07491893a0b3dd485f810766d1df8ccd4536
SHA512

d33c815a8a26260129bdd77915fdf1878be6c4643dfae2deb133618d90677358c4eb85ebf485d2209e825a985c030734d13131ec0709df1f3725bb863756820f
SSDEEP

6144:SAXP0ECVcLui896rs981zpUe7PXbRjSSjhJKQl:Z0Ea+C2rXFeUhEQl

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  95ebbe704ee623fbdc4384e50d3e5c21_JaffaCakes118
- Size
  
  325KB
- MD5
  
  95ebbe704ee623fbdc4384e50d3e5c21
- SHA1
  
  e127378a91282de0c5768767bc79b1d8fc4e7a9d
- SHA256
  
  169af01078c3177f38dd0e7ba27e07491893a0b3dd485f810766d1df8ccd4536
- SHA512
  
  d33c815a8a26260129bdd77915fdf1878be6c4643dfae2deb133618d90677358c4eb85ebf485d2209e825a985c030734d13131ec0709df1f3725bb863756820f
- SSDEEP
  
  6144:SAXP0ECVcLui896rs981zpUe7PXbRjSSjhJKQl:Z0Ea+C2rXFeUhEQl
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2