19d3f5d851b294f4c46d19efbcdb871ad018c1fd9c02a3e42d1dbd324b86a2fc | Triage

Sharing

General

Target

8be756adb43dcd218b26bc9b1b284d18_JaffaCakes118
Size

718KB
Sample

240811-zjqfas1fqe
MD5

8be756adb43dcd218b26bc9b1b284d18
SHA1

8d151096a61c4a78e7740edf8ffc729e8efa94d8
SHA256

19d3f5d851b294f4c46d19efbcdb871ad018c1fd9c02a3e42d1dbd324b86a2fc
SHA512

01dd2a432f8504c83565e0cc1374c5f36aa40000c6e7d7e7bdb1d8f359048f21c82bbab32b7c341515a907024f79c0976870c700d793c74612efba40d555f338
SSDEEP

6144:VM/in98C/WvBJIzvGO8QC2VV8nVG2CPRgLXM+1mq7kycl8dk3LNr6XoRDae8N5Yy:cC98CQnmGl2g+gL8+13gyc6EZou+A2n

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8be756adb43dcd218b26bc9b1b284d18_JaffaCakes118
- Size
  
  718KB
- MD5
  
  8be756adb43dcd218b26bc9b1b284d18
- SHA1
  
  8d151096a61c4a78e7740edf8ffc729e8efa94d8
- SHA256
  
  19d3f5d851b294f4c46d19efbcdb871ad018c1fd9c02a3e42d1dbd324b86a2fc
- SHA512
  
  01dd2a432f8504c83565e0cc1374c5f36aa40000c6e7d7e7bdb1d8f359048f21c82bbab32b7c341515a907024f79c0976870c700d793c74612efba40d555f338
- SSDEEP
  
  6144:VM/in98C/WvBJIzvGO8QC2VV8nVG2CPRgLXM+1mq7kycl8dk3LNr6XoRDae8N5Yy:cC98CQnmGl2g+gL8+13gyc6EZou+A2n
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Program crash
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2