8e16867313d38038e305422a3e9827d7d89a11566a93fe124dcd83c5a474e669 | Triage

Sharing

General

Target

ade24eda97d30fd5911fc1f2ca419072_JaffaCakes118
Size

327KB
Sample

240615-lze3lsweqb
MD5

ade24eda97d30fd5911fc1f2ca419072
SHA1

26eb8423d918a80c11f584132e3a2d1160793ff1
SHA256

8e16867313d38038e305422a3e9827d7d89a11566a93fe124dcd83c5a474e669
SHA512

8b474d830d2454ca2602c1f1771aff577724576e8f71de450cc9359a262f9a079fc3697f3ac851fc72a83a8fa775dce17ee580e805fb66a7605e5d88303a9724
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fv:Zr4iu6/eIo4Rsw33AtsmQC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ade24eda97d30fd5911fc1f2ca419072_JaffaCakes118
- Size
  
  327KB
- MD5
  
  ade24eda97d30fd5911fc1f2ca419072
- SHA1
  
  26eb8423d918a80c11f584132e3a2d1160793ff1
- SHA256
  
  8e16867313d38038e305422a3e9827d7d89a11566a93fe124dcd83c5a474e669
- SHA512
  
  8b474d830d2454ca2602c1f1771aff577724576e8f71de450cc9359a262f9a079fc3697f3ac851fc72a83a8fa775dce17ee580e805fb66a7605e5d88303a9724
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fv:Zr4iu6/eIo4Rsw33AtsmQC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2