5147659cb5419bc98e9d3cbab3ce0bc05e38e00bafddef41ac616858af5350cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b35ebb13248e4b74f353fae36fc16a3b_JaffaCakes118
Size

313KB
Sample

240616-n2ldhssbrg
MD5

b35ebb13248e4b74f353fae36fc16a3b
SHA1

ac0b7c691386dac81c8b59ab8d307b4f8757686a
SHA256

5147659cb5419bc98e9d3cbab3ce0bc05e38e00bafddef41ac616858af5350cb
SHA512

c2161b7d1172ad887bcde8e6cbddd292824813ce8f25cd03a3bdc2eedc6fc27ccd676c254c8f06445cae83ddbaef6500b3756600462fbd9d93f5f5784b1057a1
SSDEEP

6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Ld:Xryu6/eIo4vMResyEf0uP9d9UG0d

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b35ebb13248e4b74f353fae36fc16a3b_JaffaCakes118
- Size
  
  313KB
- MD5
  
  b35ebb13248e4b74f353fae36fc16a3b
- SHA1
  
  ac0b7c691386dac81c8b59ab8d307b4f8757686a
- SHA256
  
  5147659cb5419bc98e9d3cbab3ce0bc05e38e00bafddef41ac616858af5350cb
- SHA512
  
  c2161b7d1172ad887bcde8e6cbddd292824813ce8f25cd03a3bdc2eedc6fc27ccd676c254c8f06445cae83ddbaef6500b3756600462fbd9d93f5f5784b1057a1
- SSDEEP
  
  6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Ld:Xryu6/eIo4vMResyEf0uP9d9UG0d
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2