123b43c381a0c45326ce99230d5346ab9078e28fa536666156e75f63508c8a42 | Triage

Sharing

General

Target

9bb9c015e7692eccd26b3df60d836aac_JaffaCakes118
Size

258KB
Sample

240610-x1tsyaxfqm
MD5

9bb9c015e7692eccd26b3df60d836aac
SHA1

3a82f2e020d5794248a06e110c67cb53382f2d3b
SHA256

123b43c381a0c45326ce99230d5346ab9078e28fa536666156e75f63508c8a42
SHA512

a83d21a36b032f9f30a2be796abce713508d59331e72d11f2e8faa50ce05387e5a8c75e02407d971c96f95e55ab8621d4529881d4e9b7db9d68e43a0747f4e0c
SSDEEP

3072:HcP6pi6fZbv4cojdaWE0ZA9msMG4qBMBlOreNh4s7GsPQtupaqXIVLORH6C:HcPkfVyjd2m5qOl2e0sVaqXSLaHB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9bb9c015e7692eccd26b3df60d836aac_JaffaCakes118
- Size
  
  258KB
- MD5
  
  9bb9c015e7692eccd26b3df60d836aac
- SHA1
  
  3a82f2e020d5794248a06e110c67cb53382f2d3b
- SHA256
  
  123b43c381a0c45326ce99230d5346ab9078e28fa536666156e75f63508c8a42
- SHA512
  
  a83d21a36b032f9f30a2be796abce713508d59331e72d11f2e8faa50ce05387e5a8c75e02407d971c96f95e55ab8621d4529881d4e9b7db9d68e43a0747f4e0c
- SSDEEP
  
  3072:HcP6pi6fZbv4cojdaWE0ZA9msMG4qBMBlOreNh4s7GsPQtupaqXIVLORH6C:HcPkfVyjd2m5qOl2e0sVaqXSLaHB
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2