0606192019c437960df59ae9f5193e653adf42a5a7420fe7cb171ffa248901df | Triage

Sharing

General

Target

a6a82e32fba9101a6d6b20a4f0fe47f1_JaffaCakes118
Size

259KB
Sample

240613-1c8tqsvbpm
MD5

a6a82e32fba9101a6d6b20a4f0fe47f1
SHA1

08b8cd543275e7207f44115388856b771a2e089a
SHA256

0606192019c437960df59ae9f5193e653adf42a5a7420fe7cb171ffa248901df
SHA512

c453e2d297d1d995cd87e7c23e1b9a6ce5b4952225330d061d2b8e69157ba3ed5404b3de089bee8ba89d54e0182e3e785e57e602f9b836d3070d9b130c31d3b7
SSDEEP

6144:MpPgyulBUKYOheJdsf8QSa1uOl/ZLhGF7n:M1giK3eJ6EQnllzGF7n

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a6a82e32fba9101a6d6b20a4f0fe47f1_JaffaCakes118
- Size
  
  259KB
- MD5
  
  a6a82e32fba9101a6d6b20a4f0fe47f1
- SHA1
  
  08b8cd543275e7207f44115388856b771a2e089a
- SHA256
  
  0606192019c437960df59ae9f5193e653adf42a5a7420fe7cb171ffa248901df
- SHA512
  
  c453e2d297d1d995cd87e7c23e1b9a6ce5b4952225330d061d2b8e69157ba3ed5404b3de089bee8ba89d54e0182e3e785e57e602f9b836d3070d9b130c31d3b7
- SSDEEP
  
  6144:MpPgyulBUKYOheJdsf8QSa1uOl/ZLhGF7n:M1giK3eJ6EQnllzGF7n
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2