95a2dca704ea984dd6f58b2c0eff352ef6d67caab48774563ecd78f57ba46742 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d95a9d63455ec041a71b763d5026813_JaffaCakes118
Size

2.7MB
Sample

240708-ydydaavhkj
MD5

2d95a9d63455ec041a71b763d5026813
SHA1

b247e139d7931fa46d8a5af8e2b0b4b3d0438984
SHA256

95a2dca704ea984dd6f58b2c0eff352ef6d67caab48774563ecd78f57ba46742
SHA512

524d344e7f158b0298238baa2f94814a6fd99616ae544a630c6c86c80285aa1945608cd654d5db800fa12742a2ce47095cca1958f0627adf7b16311236bc2e12
SSDEEP

49152:++fqs1p1m2606SaIIBukMURRC3HsomrF+34kQ12ndC4pvBJJKKNzVoky+MsI:++f11p1B6066IBukMEE3MomrEDQ1kJH2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2d95a9d63455ec041a71b763d5026813_JaffaCakes118
- Size
  
  2.7MB
- MD5
  
  2d95a9d63455ec041a71b763d5026813
- SHA1
  
  b247e139d7931fa46d8a5af8e2b0b4b3d0438984
- SHA256
  
  95a2dca704ea984dd6f58b2c0eff352ef6d67caab48774563ecd78f57ba46742
- SHA512
  
  524d344e7f158b0298238baa2f94814a6fd99616ae544a630c6c86c80285aa1945608cd654d5db800fa12742a2ce47095cca1958f0627adf7b16311236bc2e12
- SSDEEP
  
  49152:++fqs1p1m2606SaIIBukMURRC3HsomrF+34kQ12ndC4pvBJJKKNzVoky+MsI:++f11p1B6066IBukMEE3MomrEDQ1kJH2
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2