77531f80a74e4692f27d1a777a5f0b8b1d714aaa16f2fbae92d07a7b611d5569 | Triage

Sharing

General

Target

e1db97774fb06894f2c712192bb6d6b9_JaffaCakes118
Size

3.8MB
Sample

240915-gwnhcszbnn
MD5

e1db97774fb06894f2c712192bb6d6b9
SHA1

5860e65073bc14d4207120ce1eb1695cca614367
SHA256

77531f80a74e4692f27d1a777a5f0b8b1d714aaa16f2fbae92d07a7b611d5569
SHA512

30cde4c23d1efba6347b7e89476bfbe30eb019db4c5d5b80c00f8d9375506780b2c9fe03ee7f1b952858d1910b9e4a9094cd4149062586fbb6b66f85b4d82031
SSDEEP

49152:YAx0hH9uUycRkV1n3V3v5zESRsj0Zuur1T75Yk38dWN2GVHSrszKErmNF985:YA6t9uUylVZUdJg1l3eWN2oHSRErmNy

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  e1db97774fb06894f2c712192bb6d6b9_JaffaCakes118
- Size
  
  3.8MB
- MD5
  
  e1db97774fb06894f2c712192bb6d6b9
- SHA1
  
  5860e65073bc14d4207120ce1eb1695cca614367
- SHA256
  
  77531f80a74e4692f27d1a777a5f0b8b1d714aaa16f2fbae92d07a7b611d5569
- SHA512
  
  30cde4c23d1efba6347b7e89476bfbe30eb019db4c5d5b80c00f8d9375506780b2c9fe03ee7f1b952858d1910b9e4a9094cd4149062586fbb6b66f85b4d82031
- SSDEEP
  
  49152:YAx0hH9uUycRkV1n3V3v5zESRsj0Zuur1T75Yk38dWN2GVHSrszKErmNF985:YA6t9uUylVZUdJg1l3eWN2oHSRErmNy
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2