6b302a20193c4a3869d17d69eaec42f80b4fe046030065fa1406d34b348d0523 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf711a31dc0b734c75cfb5c95793a778_JaffaCakes118
Size

320KB
Sample

240906-nsx1ysvcnd
MD5

cf711a31dc0b734c75cfb5c95793a778
SHA1

4b1dd0dc3a96ad40f8ac95c973b70329ac7f2dcf
SHA256

6b302a20193c4a3869d17d69eaec42f80b4fe046030065fa1406d34b348d0523
SHA512

6268c4b76359507f9a0a8632e22e6d8c1e934960cc24db426a8d2ca3ae5fca745f733b6142283f3abc758b64c5dd366ab900296265a91e1dafdf82bb8f1367a2
SSDEEP

6144:R6SnLE2OL6AzwGXgIG8a7e0/Ag6Pex3FJS3k:R6SnLpU6MwGjG8an/Ag6P2y3k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cf711a31dc0b734c75cfb5c95793a778_JaffaCakes118
- Size
  
  320KB
- MD5
  
  cf711a31dc0b734c75cfb5c95793a778
- SHA1
  
  4b1dd0dc3a96ad40f8ac95c973b70329ac7f2dcf
- SHA256
  
  6b302a20193c4a3869d17d69eaec42f80b4fe046030065fa1406d34b348d0523
- SHA512
  
  6268c4b76359507f9a0a8632e22e6d8c1e934960cc24db426a8d2ca3ae5fca745f733b6142283f3abc758b64c5dd366ab900296265a91e1dafdf82bb8f1367a2
- SSDEEP
  
  6144:R6SnLE2OL6AzwGXgIG8a7e0/Ag6Pex3FJS3k:R6SnLpU6MwGjG8an/Ag6P2y3k
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2