566b4982b922e834501f94647f01f4ed6f9e12a8b5313ef4b2d4651bcaa7dc30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0e77931ced48552cd452596a9fd123a_JaffaCakes118
Size

314KB
Sample

240612-q8kfxaxdqf
MD5

a0e77931ced48552cd452596a9fd123a
SHA1

9f8f74ede13bf0b2d9ad593efcea749f802863ba
SHA256

566b4982b922e834501f94647f01f4ed6f9e12a8b5313ef4b2d4651bcaa7dc30
SHA512

46f0002ed1943e2820ff54211f465c8fda925dc8be578d9eb3d325a9b5fec864d7b149686d14954abe0ca510c761f3abc947079005603ef55dc6bfbaf005ebb2
SSDEEP

6144:Pr4bUzkuvcBYC47l2x9bpAJiqS1JDoU0/JleWvJ6AbJbkvIxBu4Ti3iQrO:Pr9kuveY3ImYZ15oU0/HtbJbkgXJGyQK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a0e77931ced48552cd452596a9fd123a_JaffaCakes118
- Size
  
  314KB
- MD5
  
  a0e77931ced48552cd452596a9fd123a
- SHA1
  
  9f8f74ede13bf0b2d9ad593efcea749f802863ba
- SHA256
  
  566b4982b922e834501f94647f01f4ed6f9e12a8b5313ef4b2d4651bcaa7dc30
- SHA512
  
  46f0002ed1943e2820ff54211f465c8fda925dc8be578d9eb3d325a9b5fec864d7b149686d14954abe0ca510c761f3abc947079005603ef55dc6bfbaf005ebb2
- SSDEEP
  
  6144:Pr4bUzkuvcBYC47l2x9bpAJiqS1JDoU0/JleWvJ6AbJbkvIxBu4Ti3iQrO:Pr9kuveY3ImYZ15oU0/HtbJbkgXJGyQK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2