a696a751082f056c7d641a4c79bfa8aabc16107054eecc1f31ba15f27aa2f284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d060e00c01edb80c81d5f3894c6a7f7e_JaffaCakes118
Size

316KB
Sample

240906-y2e7lswelf
MD5

d060e00c01edb80c81d5f3894c6a7f7e
SHA1

0a47c87fd7fcc7f8b9b39cbe01bd25959d70e008
SHA256

a696a751082f056c7d641a4c79bfa8aabc16107054eecc1f31ba15f27aa2f284
SHA512

dffb61e3833383e73af3a93417d3fec3ed9abfc36689cde4a1c8a2b818c2ec59c1be3a55ce71d18dfb67834ba2b041b1f71600075ad110b803e87b138765224e
SSDEEP

6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wV6:RrkkuveY3zhlV6tmDxzwV6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d060e00c01edb80c81d5f3894c6a7f7e_JaffaCakes118
- Size
  
  316KB
- MD5
  
  d060e00c01edb80c81d5f3894c6a7f7e
- SHA1
  
  0a47c87fd7fcc7f8b9b39cbe01bd25959d70e008
- SHA256
  
  a696a751082f056c7d641a4c79bfa8aabc16107054eecc1f31ba15f27aa2f284
- SHA512
  
  dffb61e3833383e73af3a93417d3fec3ed9abfc36689cde4a1c8a2b818c2ec59c1be3a55ce71d18dfb67834ba2b041b1f71600075ad110b803e87b138765224e
- SSDEEP
  
  6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wV6:RrkkuveY3zhlV6tmDxzwV6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2