6a889d9ce0af60472ac8a90d55cb8dc1032048b96cd4f3ddbf72e860d41a9a9a | Triage

Sharing

General

Target

a45a07ff0e1b1b71fbc00c9796a6cf6d_JaffaCakes118
Size

214KB
Sample

240817-159lqszfpa
MD5

a45a07ff0e1b1b71fbc00c9796a6cf6d
SHA1

0232bdef7054e81ec1a9cfe20dbaf9d9f039e677
SHA256

6a889d9ce0af60472ac8a90d55cb8dc1032048b96cd4f3ddbf72e860d41a9a9a
SHA512

846c15bcd4d77fdfb04b708a640e3f585523461851ef4af11dd62e876983d8ecaf51fdc61946bb422db3e084e3bef845ffd17299288038701ca0b3804a9bf060
SSDEEP

3072:4HHyIXR/iE13RdWJMJYuh0TZA/+L5bHSKInDBBjnz73SQvLG/VtJcDx0G2ShqNTe:4hlaMJZhk12N1vikQVtJcDxdJhaGq5lW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a45a07ff0e1b1b71fbc00c9796a6cf6d_JaffaCakes118
- Size
  
  214KB
- MD5
  
  a45a07ff0e1b1b71fbc00c9796a6cf6d
- SHA1
  
  0232bdef7054e81ec1a9cfe20dbaf9d9f039e677
- SHA256
  
  6a889d9ce0af60472ac8a90d55cb8dc1032048b96cd4f3ddbf72e860d41a9a9a
- SHA512
  
  846c15bcd4d77fdfb04b708a640e3f585523461851ef4af11dd62e876983d8ecaf51fdc61946bb422db3e084e3bef845ffd17299288038701ca0b3804a9bf060
- SSDEEP
  
  3072:4HHyIXR/iE13RdWJMJYuh0TZA/+L5bHSKInDBBjnz73SQvLG/VtJcDx0G2ShqNTe:4hlaMJZhk12N1vikQVtJcDxdJhaGq5lW
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2