28348edcdf78bff9bd46f6fd9b8138571800a990be465447fcf37f267358876f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d063b2484cb639743e0c45a5132ebbe2_JaffaCakes118
Size

312KB
Sample

240906-y6g7rswgjg
MD5

d063b2484cb639743e0c45a5132ebbe2
SHA1

a2e6e7f835714dcdcf397434998d2714045ca6e0
SHA256

28348edcdf78bff9bd46f6fd9b8138571800a990be465447fcf37f267358876f
SHA512

dc6e3e45f2c429945bf3ad567cc6a625efd7389adf124f2c707748a7a7ed50d1109a30aa7ecb9602b228583d7649817d5a55709c70c0a86391fbf6a6208fb37a
SSDEEP

6144:5rkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iad:5rkau6/eIo43ts7KcXgXAN7ig

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d063b2484cb639743e0c45a5132ebbe2_JaffaCakes118
- Size
  
  312KB
- MD5
  
  d063b2484cb639743e0c45a5132ebbe2
- SHA1
  
  a2e6e7f835714dcdcf397434998d2714045ca6e0
- SHA256
  
  28348edcdf78bff9bd46f6fd9b8138571800a990be465447fcf37f267358876f
- SHA512
  
  dc6e3e45f2c429945bf3ad567cc6a625efd7389adf124f2c707748a7a7ed50d1109a30aa7ecb9602b228583d7649817d5a55709c70c0a86391fbf6a6208fb37a
- SSDEEP
  
  6144:5rkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iad:5rkau6/eIo43ts7KcXgXAN7ig
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2