13c961879ac4e847ec2f091fa9977782e04b5e092a6dc45c5e76bbc2bd4e7650 | Triage

Sharing

General

Target

b8961b6d2c211ae84f957e9467cf0742_JaffaCakes118
Size

259KB
Sample

240617-ph937szgla
MD5

b8961b6d2c211ae84f957e9467cf0742
SHA1

b501505e84737f14da300734c58517c063e2a9df
SHA256

13c961879ac4e847ec2f091fa9977782e04b5e092a6dc45c5e76bbc2bd4e7650
SHA512

97b71eb06ae5b7d3e1c3687251f32a21f2bb545e46da5fcad443cfa9d7c896bdf9633a549fc6d3c8d5caef35cb7c9db32e02038170ff863eff9d48953ca96433
SSDEEP

3072:bl6gW9Q5KP15BOw242UEn0lcV6rEGlkr6MWEBu9XUG4rFDcHVRLUvE:bl6gKQQzIw9/c8PkrQN9EG45eRLUvE

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  b8961b6d2c211ae84f957e9467cf0742_JaffaCakes118
- Size
  
  259KB
- MD5
  
  b8961b6d2c211ae84f957e9467cf0742
- SHA1
  
  b501505e84737f14da300734c58517c063e2a9df
- SHA256
  
  13c961879ac4e847ec2f091fa9977782e04b5e092a6dc45c5e76bbc2bd4e7650
- SHA512
  
  97b71eb06ae5b7d3e1c3687251f32a21f2bb545e46da5fcad443cfa9d7c896bdf9633a549fc6d3c8d5caef35cb7c9db32e02038170ff863eff9d48953ca96433
- SSDEEP
  
  3072:bl6gW9Q5KP15BOw242UEn0lcV6rEGlkr6MWEBu9XUG4rFDcHVRLUvE:bl6gKQQzIw9/c8PkrQN9EG45eRLUvE
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2