06c1b7afa6c27b0ac07cb34e525bc9d02475313295dead32f644353e6a50a240 | Triage

Sharing

General

Target

dfb206e935cd7590d15ea653dc1786e8_JaffaCakes118
Size

28KB
Sample

240914-hnsmsasbka
MD5

dfb206e935cd7590d15ea653dc1786e8
SHA1

8f04c4191e460046e04393d660b79fc6dad9af43
SHA256

06c1b7afa6c27b0ac07cb34e525bc9d02475313295dead32f644353e6a50a240
SHA512

1983027c0864abfe7d6007fa37b6ac0adc6deca6d8d4eee20ca60ae346697e08e1cc34eaa01d290b48f9c7bb489412297aebe409eaf16eca19bd33427e30a1ea
SSDEEP

768:jy+DGhusVP40Tv2RVmhQpvch93hkSYFnbcuyD7U0Nc:jyzusVAm2RVmksySYFnouy8Uc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dfb206e935cd7590d15ea653dc1786e8_JaffaCakes118
- Size
  
  28KB
- MD5
  
  dfb206e935cd7590d15ea653dc1786e8
- SHA1
  
  8f04c4191e460046e04393d660b79fc6dad9af43
- SHA256
  
  06c1b7afa6c27b0ac07cb34e525bc9d02475313295dead32f644353e6a50a240
- SHA512
  
  1983027c0864abfe7d6007fa37b6ac0adc6deca6d8d4eee20ca60ae346697e08e1cc34eaa01d290b48f9c7bb489412297aebe409eaf16eca19bd33427e30a1ea
- SSDEEP
  
  768:jy+DGhusVP40Tv2RVmhQpvch93hkSYFnbcuyD7U0Nc:jyzusVAm2RVmksySYFnouy8Uc
Score

7^/10

discovery
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2