d308600a9881c6bc1f9db2f47feaed07d7bd302bf88d4d8fb0d9a39db78acdfe | Triage

Sharing

General

Target

ac4a09d671e9c6cd64d30c0bf99bcad6_JaffaCakes118
Size

327KB
Sample

240615-a4n1jawhqp
MD5

ac4a09d671e9c6cd64d30c0bf99bcad6
SHA1

48f3eddfbc43b253f338d9db97e25932964d94f6
SHA256

d308600a9881c6bc1f9db2f47feaed07d7bd302bf88d4d8fb0d9a39db78acdfe
SHA512

d6ebca16a1e32bd70d95f5a6941ed75473ecb308e74f9ff44d4a3198684f7d48d320ab689be1449646a8f8a5189fa700311de7a0fe061a33c6898895af617889
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Ff:Zr4iu6/eIo4Rsw33AtsmQW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ac4a09d671e9c6cd64d30c0bf99bcad6_JaffaCakes118
- Size
  
  327KB
- MD5
  
  ac4a09d671e9c6cd64d30c0bf99bcad6
- SHA1
  
  48f3eddfbc43b253f338d9db97e25932964d94f6
- SHA256
  
  d308600a9881c6bc1f9db2f47feaed07d7bd302bf88d4d8fb0d9a39db78acdfe
- SHA512
  
  d6ebca16a1e32bd70d95f5a6941ed75473ecb308e74f9ff44d4a3198684f7d48d320ab689be1449646a8f8a5189fa700311de7a0fe061a33c6898895af617889
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Ff:Zr4iu6/eIo4Rsw33AtsmQW
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2