045f0ec1315b6309b6ebae5fbe70e72b91f8b3f3a4ad810e020949b8507e09b1 | Triage

Sharing

General

Target

b1d63f171a13d96673445c4db51547f2_JaffaCakes118
Size

259KB
Sample

240616-fnve9svbqn
MD5

b1d63f171a13d96673445c4db51547f2
SHA1

92d156fa3188f2de5c38438e5138af1f119d76e6
SHA256

045f0ec1315b6309b6ebae5fbe70e72b91f8b3f3a4ad810e020949b8507e09b1
SHA512

d4d971c61e34fb51237728f67e992008c15c3dca38d9445a924eecdd18baade2f29be9e8cdaa7acd34dcbd0a5411f17a4188a73265763b22cc84abd2fd8bee99
SSDEEP

6144:+zrxg8OH79Z1P/R8qVjFBkCVvFJtIlc5Xs/qrc+:+fa8GN6q9FBkCRWx/qrc+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b1d63f171a13d96673445c4db51547f2_JaffaCakes118
- Size
  
  259KB
- MD5
  
  b1d63f171a13d96673445c4db51547f2
- SHA1
  
  92d156fa3188f2de5c38438e5138af1f119d76e6
- SHA256
  
  045f0ec1315b6309b6ebae5fbe70e72b91f8b3f3a4ad810e020949b8507e09b1
- SHA512
  
  d4d971c61e34fb51237728f67e992008c15c3dca38d9445a924eecdd18baade2f29be9e8cdaa7acd34dcbd0a5411f17a4188a73265763b22cc84abd2fd8bee99
- SSDEEP
  
  6144:+zrxg8OH79Z1P/R8qVjFBkCVvFJtIlc5Xs/qrc+:+fa8GN6q9FBkCRWx/qrc+
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2