e0acc5b995620b60563b5ef8d5233576ad2c14bb83a290c9420754af2d3694a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a709b1ef413cfba02c9059c1c86daab8_JaffaCakes118
Size

304KB
Sample

240613-246dcsybkk
MD5

a709b1ef413cfba02c9059c1c86daab8
SHA1

b8a9e114669085db1990e879741201630387d51e
SHA256

e0acc5b995620b60563b5ef8d5233576ad2c14bb83a290c9420754af2d3694a1
SHA512

ad4f00bb8b357a51fd289c0ea68f2c713af94a251ab7a36c4a77c6fd90ea694feb0c3461c1885ff42a6f16e80a675e7ec3717f481a69c74acc16fb0e12cde2a9
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPf:Nrkuu6/eIo4tQW62T+uTwM6YVxm24cg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a709b1ef413cfba02c9059c1c86daab8_JaffaCakes118
- Size
  
  304KB
- MD5
  
  a709b1ef413cfba02c9059c1c86daab8
- SHA1
  
  b8a9e114669085db1990e879741201630387d51e
- SHA256
  
  e0acc5b995620b60563b5ef8d5233576ad2c14bb83a290c9420754af2d3694a1
- SHA512
  
  ad4f00bb8b357a51fd289c0ea68f2c713af94a251ab7a36c4a77c6fd90ea694feb0c3461c1885ff42a6f16e80a675e7ec3717f481a69c74acc16fb0e12cde2a9
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPf:Nrkuu6/eIo4tQW62T+uTwM6YVxm24cg
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2