06ad08eab2623ae51f95557da0ed1acb062851c7788e7ee143530e54d6f5c1f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a33e8a2949c5fc93280d34d79c05fd00_JaffaCakes118
Size

304KB
Sample

240613-a8yersxhkh
MD5

a33e8a2949c5fc93280d34d79c05fd00
SHA1

1254e55983e7b4ce237a8620c8115ac486e9e43a
SHA256

06ad08eab2623ae51f95557da0ed1acb062851c7788e7ee143530e54d6f5c1f1
SHA512

74f51b0db064a1e90f399763c1ee9c90b526fc8e1e32fd5166abca362e0718d9227e7594489e2903370800b7b72dd984bfadd4a101b3313321c312948e6e71cc
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP1:Vrkuu6/eIo4tQW62T+uTwM6YVxm241

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a33e8a2949c5fc93280d34d79c05fd00_JaffaCakes118
- Size
  
  304KB
- MD5
  
  a33e8a2949c5fc93280d34d79c05fd00
- SHA1
  
  1254e55983e7b4ce237a8620c8115ac486e9e43a
- SHA256
  
  06ad08eab2623ae51f95557da0ed1acb062851c7788e7ee143530e54d6f5c1f1
- SHA512
  
  74f51b0db064a1e90f399763c1ee9c90b526fc8e1e32fd5166abca362e0718d9227e7594489e2903370800b7b72dd984bfadd4a101b3313321c312948e6e71cc
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP1:Vrkuu6/eIo4tQW62T+uTwM6YVxm241
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2