24bd6e44239e21ce59e11f486f3d7fc38a92ac59300e7df2dfee7a2a7f9f68d5 | Triage

Sharing

General

Target

a573721bac8c733f1c12f565a0f13425_JaffaCakes118
Size

341KB
Sample

240613-n9wt8asblq
MD5

a573721bac8c733f1c12f565a0f13425
SHA1

7bc3fde437ec620835aed454e46f0d9ed489f1f3
SHA256

24bd6e44239e21ce59e11f486f3d7fc38a92ac59300e7df2dfee7a2a7f9f68d5
SHA512

c8f1d819cfe067725ccf921ba9d9419b096b6b3d267c6d1cea554e5d63e038b42a34f853e1f47f7d6f6305cc327740d659473182e8d8ab0f235c0f939096ad83
SSDEEP

6144:E1f3p4J7kSBQW1L9yM37MO6tEjsV+wD8+O7fy2my15THWf:Gh4l1L9DgOCuQ+Y3O7fyzcTHWf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a573721bac8c733f1c12f565a0f13425_JaffaCakes118
- Size
  
  341KB
- MD5
  
  a573721bac8c733f1c12f565a0f13425
- SHA1
  
  7bc3fde437ec620835aed454e46f0d9ed489f1f3
- SHA256
  
  24bd6e44239e21ce59e11f486f3d7fc38a92ac59300e7df2dfee7a2a7f9f68d5
- SHA512
  
  c8f1d819cfe067725ccf921ba9d9419b096b6b3d267c6d1cea554e5d63e038b42a34f853e1f47f7d6f6305cc327740d659473182e8d8ab0f235c0f939096ad83
- SSDEEP
  
  6144:E1f3p4J7kSBQW1L9yM37MO6tEjsV+wD8+O7fy2my15THWf:Gh4l1L9DgOCuQ+Y3O7fyzcTHWf
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2