14e989888ed234522abefa0339b2f439f3319b81f0e49d01a5fa6019b79cc161 | Triage

Sharing

General

Target

d554c1b263c533a5d044e975e7d5d2af_JaffaCakes118
Size

323KB
Sample

240909-aba8zasaqp
MD5

d554c1b263c533a5d044e975e7d5d2af
SHA1

33f15c8b22a3b8244aa2a0dc62edf0d31265f552
SHA256

14e989888ed234522abefa0339b2f439f3319b81f0e49d01a5fa6019b79cc161
SHA512

897291583e6657c8ecf0a1e90a18fe8859c90e3cceb7bd6384cf36ab2bde53212eb771cdef76507561597f5a708bab22fdd1d2b95905bb76f13d22868eb7497c
SSDEEP

6144:wAXP0ECVcLui896rs981zpEL6Zc5885quopN:70Ea+C2yT15q3pN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d554c1b263c533a5d044e975e7d5d2af_JaffaCakes118
- Size
  
  323KB
- MD5
  
  d554c1b263c533a5d044e975e7d5d2af
- SHA1
  
  33f15c8b22a3b8244aa2a0dc62edf0d31265f552
- SHA256
  
  14e989888ed234522abefa0339b2f439f3319b81f0e49d01a5fa6019b79cc161
- SHA512
  
  897291583e6657c8ecf0a1e90a18fe8859c90e3cceb7bd6384cf36ab2bde53212eb771cdef76507561597f5a708bab22fdd1d2b95905bb76f13d22868eb7497c
- SSDEEP
  
  6144:wAXP0ECVcLui896rs981zpEL6Zc5885quopN:70Ea+C2yT15q3pN
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2