31b2708c1c40c252ff10d211af2970cebf524d0a029a833c2a0b60535ebfd8fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c9bc0bd74a298f6654048a5a57ac989_JaffaCakes118
Size

135KB
Sample

240712-j3fgfaxela
MD5

3c9bc0bd74a298f6654048a5a57ac989
SHA1

4e018899837d50176329851f24837a1e8ae379d5
SHA256

31b2708c1c40c252ff10d211af2970cebf524d0a029a833c2a0b60535ebfd8fa
SHA512

c239db39424fb8f90565bc2a234079c41e6989d6f14d33d95c06f076c50219eda3d56d1e457092e9070ac61d65475cf2e70347bbeda57e0decfbd6d6a6370c91
SSDEEP

3072:T7bV9V1mXxzjl6NznCQy2mZa/fp8nevAhFpumgOFjnnjzJm:T7btcCNzrlpueohF0gLjzw

Score

7^/10

Malware Config

Targets

- Target
  
  3c9bc0bd74a298f6654048a5a57ac989_JaffaCakes118
- Size
  
  135KB
- MD5
  
  3c9bc0bd74a298f6654048a5a57ac989
- SHA1
  
  4e018899837d50176329851f24837a1e8ae379d5
- SHA256
  
  31b2708c1c40c252ff10d211af2970cebf524d0a029a833c2a0b60535ebfd8fa
- SHA512
  
  c239db39424fb8f90565bc2a234079c41e6989d6f14d33d95c06f076c50219eda3d56d1e457092e9070ac61d65475cf2e70347bbeda57e0decfbd6d6a6370c91
- SSDEEP
  
  3072:T7bV9V1mXxzjl6NznCQy2mZa/fp8nevAhFpumgOFjnnjzJm:T7btcCNzrlpueohF0gLjzw
Score

7^/10
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2