05991c541c326491d2a3e8812af354885616ac1590c8428406848af946a30be1 | Triage

Sharing

General

Target

b357439e5a86c86bdc3f6866ef469035_JaffaCakes118
Size

35KB
Sample

240821-nyh4zszgll
MD5

b357439e5a86c86bdc3f6866ef469035
SHA1

d769a3eac3d0d3ad113eb2ec93e7348e1d8e7cb4
SHA256

05991c541c326491d2a3e8812af354885616ac1590c8428406848af946a30be1
SHA512

d1226c4708bb3170a377183167375b63c3a00d5f9a4b88aa8b10cbe18fd454f5fbfa5687a13950fad03b6974ef04248a18e10bda744a0f2be0d6cc934953a4ec
SSDEEP

768:8hOPvVLGJwA25Exh0aCSK7IQY2g971+54HzrxG4yv7:8M9xWr0aykSg9Z+wnx8

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  b357439e5a86c86bdc3f6866ef469035_JaffaCakes118
- Size
  
  35KB
- MD5
  
  b357439e5a86c86bdc3f6866ef469035
- SHA1
  
  d769a3eac3d0d3ad113eb2ec93e7348e1d8e7cb4
- SHA256
  
  05991c541c326491d2a3e8812af354885616ac1590c8428406848af946a30be1
- SHA512
  
  d1226c4708bb3170a377183167375b63c3a00d5f9a4b88aa8b10cbe18fd454f5fbfa5687a13950fad03b6974ef04248a18e10bda744a0f2be0d6cc934953a4ec
- SSDEEP
  
  768:8hOPvVLGJwA25Exh0aCSK7IQY2g971+54HzrxG4yv7:8M9xWr0aykSg9Z+wnx8
Score

10^/10

discovery evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2