218e5d6a2497b9e71a115b1c095aacfe05c45c54958e77470604a4486c7c0537 | Triage

Sharing

General

Target

b62d3793956d47d81e383c348e4c1427_JaffaCakes118
Size

320KB
Sample

240617-bv7lysxhpb
MD5

b62d3793956d47d81e383c348e4c1427
SHA1

9c95d413274e410ba7f40fd1f303a5ffc47726b1
SHA256

218e5d6a2497b9e71a115b1c095aacfe05c45c54958e77470604a4486c7c0537
SHA512

12bed91ed37890a2753323e02fbb240a4015cec850417525e8d7f60501334a3bb65d44fc116834f73dcca6d0fbaba8d6e7917fdaf3272e3c6e0f06acfbf8b194
SSDEEP

6144:8brdxW4s21mPExdY3yK+/hNoypykIqvow9pU8nLN:wy451mcY3yK6uyIjqR9pxnLN

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  b62d3793956d47d81e383c348e4c1427_JaffaCakes118
- Size
  
  320KB
- MD5
  
  b62d3793956d47d81e383c348e4c1427
- SHA1
  
  9c95d413274e410ba7f40fd1f303a5ffc47726b1
- SHA256
  
  218e5d6a2497b9e71a115b1c095aacfe05c45c54958e77470604a4486c7c0537
- SHA512
  
  12bed91ed37890a2753323e02fbb240a4015cec850417525e8d7f60501334a3bb65d44fc116834f73dcca6d0fbaba8d6e7917fdaf3272e3c6e0f06acfbf8b194
- SSDEEP
  
  6144:8brdxW4s21mPExdY3yK+/hNoypykIqvow9pU8nLN:wy451mcY3yK6uyIjqR9pxnLN
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2