13785bd90461a0ae5278db612bf4c617dba72773f5d899f99ff09f84e681c8fd | Triage

Sharing

General

Target

b4ae017df498395a9c5856fb24882589_JaffaCakes118
Size

255KB
Sample

240616-xkg47swhpj
MD5

b4ae017df498395a9c5856fb24882589
SHA1

1b2d574f429fb271fbeeacfb9c901e0ab453d4a7
SHA256

13785bd90461a0ae5278db612bf4c617dba72773f5d899f99ff09f84e681c8fd
SHA512

58f8b410d84c8f30a91ab7fe7763e9e7fcff942a4b70e501db98b1e34914334a46304a7f976eb5df0a02c72380ec069f9c300d0d474e6740804a3e51094f70a0
SSDEEP

6144:gf8VX7/jbFzgEkpWyF966fSdgewsVeMnnk2wMlh:QirrRAv9R6dgdOesnk2jlh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4ae017df498395a9c5856fb24882589_JaffaCakes118
- Size
  
  255KB
- MD5
  
  b4ae017df498395a9c5856fb24882589
- SHA1
  
  1b2d574f429fb271fbeeacfb9c901e0ab453d4a7
- SHA256
  
  13785bd90461a0ae5278db612bf4c617dba72773f5d899f99ff09f84e681c8fd
- SHA512
  
  58f8b410d84c8f30a91ab7fe7763e9e7fcff942a4b70e501db98b1e34914334a46304a7f976eb5df0a02c72380ec069f9c300d0d474e6740804a3e51094f70a0
- SSDEEP
  
  6144:gf8VX7/jbFzgEkpWyF966fSdgewsVeMnnk2wMlh:QirrRAv9R6dgdOesnk2jlh
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2