75c562b3f533a9390ae7c772cec26eb6b7b2aa14a42941e42ba688135d981db1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d58af6f38abdc852568c4894406e83ad_JaffaCakes118
Size

2.8MB
Sample

240909-dc836sxhrk
MD5

d58af6f38abdc852568c4894406e83ad
SHA1

3696b48c4e3e8f8271dfa89aa153b2e16c8b3677
SHA256

75c562b3f533a9390ae7c772cec26eb6b7b2aa14a42941e42ba688135d981db1
SHA512

28a337a89b5b1d86b7c067729b7769ca319bb6588396f0fc8f8b8646238064dcf780872f40779796ceae6ebea10b0a1519dc582ac5cafdc5e4c0b23ecb20279e
SSDEEP

49152:++fqU1p1m2606SKCsl9E/dud6J5YpTDRvnHwFwIpuHkHnxXkkhrVCkRoua:++fh1p1B6069l94zmTRwFwIp0kRXkkhK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d58af6f38abdc852568c4894406e83ad_JaffaCakes118
- Size
  
  2.8MB
- MD5
  
  d58af6f38abdc852568c4894406e83ad
- SHA1
  
  3696b48c4e3e8f8271dfa89aa153b2e16c8b3677
- SHA256
  
  75c562b3f533a9390ae7c772cec26eb6b7b2aa14a42941e42ba688135d981db1
- SHA512
  
  28a337a89b5b1d86b7c067729b7769ca319bb6588396f0fc8f8b8646238064dcf780872f40779796ceae6ebea10b0a1519dc582ac5cafdc5e4c0b23ecb20279e
- SSDEEP
  
  49152:++fqU1p1m2606SKCsl9E/dud6J5YpTDRvnHwFwIpuHkHnxXkkhrVCkRoua:++fh1p1B6069l94zmTRwFwIp0kRXkkhK
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2