43f632de0308b304b9b93b5c071b7789942cfecf59e03071515873790057968c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

883ee1ca0ef5ea3b6900cb16426e2f55_JaffaCakes118
Size

185KB
Sample

240811-ah9ecavhjp
MD5

883ee1ca0ef5ea3b6900cb16426e2f55
SHA1

f1f9a60e50be68a9710439cf7185c7a4bbc70bfd
SHA256

43f632de0308b304b9b93b5c071b7789942cfecf59e03071515873790057968c
SHA512

cffcf2b1da04e0b12b5841808a505e48a554ba868d79b7425a458f1464c06434c1d063f30684e6368c8cc1a2721f50a510fa7db522afe36916813d758dc9c6ce
SSDEEP

1536:XFwPc5KWEMAAF6OpCzdhQOc9NjsBttB/7E/RT600wNaaCnYMvow5r3GRGmPkOnoP:invvOqhQOc9qXBzEJv4iMge3GVPToutA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  883ee1ca0ef5ea3b6900cb16426e2f55_JaffaCakes118
- Size
  
  185KB
- MD5
  
  883ee1ca0ef5ea3b6900cb16426e2f55
- SHA1
  
  f1f9a60e50be68a9710439cf7185c7a4bbc70bfd
- SHA256
  
  43f632de0308b304b9b93b5c071b7789942cfecf59e03071515873790057968c
- SHA512
  
  cffcf2b1da04e0b12b5841808a505e48a554ba868d79b7425a458f1464c06434c1d063f30684e6368c8cc1a2721f50a510fa7db522afe36916813d758dc9c6ce
- SSDEEP
  
  1536:XFwPc5KWEMAAF6OpCzdhQOc9NjsBttB/7E/RT600wNaaCnYMvow5r3GRGmPkOnoP:invvOqhQOc9qXBzEJv4iMge3GVPToutA
Score

7^/10

discovery
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2