155cf02574d7a9ade41b6ad8df04e955dddc0e705a5b7ba126b261f5597b906d | Triage

Sharing

General

Target

d4cedd941e282457437c3b43519d6e8d_JaffaCakes118
Size

258KB
Sample

240908-t6sw2swflm
MD5

d4cedd941e282457437c3b43519d6e8d
SHA1

73ceffb01a03510af5a52ba0f5f5c40485612f22
SHA256

155cf02574d7a9ade41b6ad8df04e955dddc0e705a5b7ba126b261f5597b906d
SHA512

08a3c90c6ebd05555de845da735e703b374bb7470ffdf4061530f4dab07cac7e6d88c9f206b9717939452673acd6a29cce2d27ecd446a43a309404a2c2ad4055
SSDEEP

6144:Y2+gkrHqDe8QODycML+9qv94mNwwxow5s:YSks6cGPecwq95s

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d4cedd941e282457437c3b43519d6e8d_JaffaCakes118
- Size
  
  258KB
- MD5
  
  d4cedd941e282457437c3b43519d6e8d
- SHA1
  
  73ceffb01a03510af5a52ba0f5f5c40485612f22
- SHA256
  
  155cf02574d7a9ade41b6ad8df04e955dddc0e705a5b7ba126b261f5597b906d
- SHA512
  
  08a3c90c6ebd05555de845da735e703b374bb7470ffdf4061530f4dab07cac7e6d88c9f206b9717939452673acd6a29cce2d27ecd446a43a309404a2c2ad4055
- SSDEEP
  
  6144:Y2+gkrHqDe8QODycML+9qv94mNwwxow5s:YSks6cGPecwq95s
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2