22b3c84646559923a20ace5689ba2e95f1693fbb0bf349e09f9d56860c2e3e34 | Triage

Sharing

General

Target

b2e17eca1c02510c4663c91ad0116e2e_JaffaCakes118
Size

313KB
Sample

240616-lwj76ayfkh
MD5

b2e17eca1c02510c4663c91ad0116e2e
SHA1

b1adbdb34f8360db2f9e2eb4f217e3788541a673
SHA256

22b3c84646559923a20ace5689ba2e95f1693fbb0bf349e09f9d56860c2e3e34
SHA512

3c4dd8b5bc42918bde30d2458b45c75e5fdb409628dc377350535d7a3b202810a2512d75e7fee7e6b90c00c63b173512dc23b5c3d091748b311dd193a6ccc9e2
SSDEEP

6144:NrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzv:Nrfu6/eIo4XwlWKM231t5UnRr3DdRp5K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2e17eca1c02510c4663c91ad0116e2e_JaffaCakes118
- Size
  
  313KB
- MD5
  
  b2e17eca1c02510c4663c91ad0116e2e
- SHA1
  
  b1adbdb34f8360db2f9e2eb4f217e3788541a673
- SHA256
  
  22b3c84646559923a20ace5689ba2e95f1693fbb0bf349e09f9d56860c2e3e34
- SHA512
  
  3c4dd8b5bc42918bde30d2458b45c75e5fdb409628dc377350535d7a3b202810a2512d75e7fee7e6b90c00c63b173512dc23b5c3d091748b311dd193a6ccc9e2
- SSDEEP
  
  6144:NrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzv:Nrfu6/eIo4XwlWKM231t5UnRr3DdRp5K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2