15cc3a2f1ea7a4baed9de84313fec352088daffc9067d3d8c62ed173e1d3f370 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddfd013700743c5d356ee5238d2196ad_JaffaCakes118
Size

230KB
Sample

240913-jm6cxssfkg
MD5

ddfd013700743c5d356ee5238d2196ad
SHA1

712ee4f85d93a47f2d38f48e0eb2b4aab53da189
SHA256

15cc3a2f1ea7a4baed9de84313fec352088daffc9067d3d8c62ed173e1d3f370
SHA512

1bfd4e8c210e68daf13d0ffc58e79147a15d8413c88b09a35cea4f12d9d6f5301bdb5f8f7b4c960f38fb31f4dfc1af5a4d90035879e6f571c65c8a4294f25846
SSDEEP

3072:dLwcriXzDl1hmcfKPElxbMFoAGvjx6U+ICUJzlo9dkZuO6UIY1rfFOMj12wKti:FDrUbhmcfz9xAIFHdCI8kAO63Bt

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  ddfd013700743c5d356ee5238d2196ad_JaffaCakes118
- Size
  
  230KB
- MD5
  
  ddfd013700743c5d356ee5238d2196ad
- SHA1
  
  712ee4f85d93a47f2d38f48e0eb2b4aab53da189
- SHA256
  
  15cc3a2f1ea7a4baed9de84313fec352088daffc9067d3d8c62ed173e1d3f370
- SHA512
  
  1bfd4e8c210e68daf13d0ffc58e79147a15d8413c88b09a35cea4f12d9d6f5301bdb5f8f7b4c960f38fb31f4dfc1af5a4d90035879e6f571c65c8a4294f25846
- SSDEEP
  
  3072:dLwcriXzDl1hmcfKPElxbMFoAGvjx6U+ICUJzlo9dkZuO6UIY1rfFOMj12wKti:FDrUbhmcfz9xAIFHdCI8kAO63Bt
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2