3ebd13f39f3cff555302b1a35b7dbbc481a0ad23161124bb3f1cfb20ac86643c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2f8cd2ab5d1e79be9f814d155ca15dc_JaffaCakes118
Size

325KB
Sample

240616-l9ympszarc
MD5

b2f8cd2ab5d1e79be9f814d155ca15dc
SHA1

0adb023436b13fff91838aa98fea8633f67e39a7
SHA256

3ebd13f39f3cff555302b1a35b7dbbc481a0ad23161124bb3f1cfb20ac86643c
SHA512

2ded117dbc02ac48ce35bc49532e80e9ac1e985c61a579b52eabc377b51c3f102013dd207fe954533f54115d09768cc93b36409c046b0da8ec56f728b801a9dd
SSDEEP

6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ofzG:cr1B3u6/eIo4ArVUBQCCYOqmO5oy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2f8cd2ab5d1e79be9f814d155ca15dc_JaffaCakes118
- Size
  
  325KB
- MD5
  
  b2f8cd2ab5d1e79be9f814d155ca15dc
- SHA1
  
  0adb023436b13fff91838aa98fea8633f67e39a7
- SHA256
  
  3ebd13f39f3cff555302b1a35b7dbbc481a0ad23161124bb3f1cfb20ac86643c
- SHA512
  
  2ded117dbc02ac48ce35bc49532e80e9ac1e985c61a579b52eabc377b51c3f102013dd207fe954533f54115d09768cc93b36409c046b0da8ec56f728b801a9dd
- SSDEEP
  
  6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ofzG:cr1B3u6/eIo4ArVUBQCCYOqmO5oy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2