7ed73388b65be6180ab572d3661b7b4fb60f023863e7b9417c0169e3cefd5c46 | Triage

Sharing

General

Target

b2f6c3d4c1beb91c382b6f3831ffd2ce_JaffaCakes118
Size

313KB
Sample

240616-l81exataqj
MD5

b2f6c3d4c1beb91c382b6f3831ffd2ce
SHA1

8d392bb1846ae1848cecbe8bbd058d37616566ae
SHA256

7ed73388b65be6180ab572d3661b7b4fb60f023863e7b9417c0169e3cefd5c46
SHA512

10f25993c9e7784f33006084764db7ddbe46d0da6bc37b38e94bfbf7b4dfb591705e347ddd7807354cd277b63d8f71d2636c910b7a3b54d708805d48a6725bce
SSDEEP

6144:nro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94dMG:nrAu6/eIo4s1yR9lsc/adMG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2f6c3d4c1beb91c382b6f3831ffd2ce_JaffaCakes118
- Size
  
  313KB
- MD5
  
  b2f6c3d4c1beb91c382b6f3831ffd2ce
- SHA1
  
  8d392bb1846ae1848cecbe8bbd058d37616566ae
- SHA256
  
  7ed73388b65be6180ab572d3661b7b4fb60f023863e7b9417c0169e3cefd5c46
- SHA512
  
  10f25993c9e7784f33006084764db7ddbe46d0da6bc37b38e94bfbf7b4dfb591705e347ddd7807354cd277b63d8f71d2636c910b7a3b54d708805d48a6725bce
- SSDEEP
  
  6144:nro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94dMG:nrAu6/eIo4s1yR9lsc/adMG
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2