5172a591745d842b14f2627fe73346649c7fe2260a2ce60dbd83dfcd32480852 | Triage

Sharing

General

Target

ea90e14d51be3f759da47e275a979e38_JaffaCakes118
Size

258KB
Sample

240919-evtlwa1bnn
MD5

ea90e14d51be3f759da47e275a979e38
SHA1

26db1ac3d24e8ba998c3d137924bad1f5eccdf2f
SHA256

5172a591745d842b14f2627fe73346649c7fe2260a2ce60dbd83dfcd32480852
SHA512

95ba4cbaffa059a489672228c9f33d261a1ac4d53109d048eaf6d829bf4110f616ba37f5cde6f34ac2469ca3f13c179da4dee0141c4e77a169ca2a6361a7e793
SSDEEP

3072:0vcP6pi6fZbv4c9nhaWEUZA9msMG4qBMBlOreNh4s7GsPQt2ZpaqXIVNtoMjRHtn:0vcPkfVzh2m5qOl2e0sZaqXS0M1Ht

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ea90e14d51be3f759da47e275a979e38_JaffaCakes118
- Size
  
  258KB
- MD5
  
  ea90e14d51be3f759da47e275a979e38
- SHA1
  
  26db1ac3d24e8ba998c3d137924bad1f5eccdf2f
- SHA256
  
  5172a591745d842b14f2627fe73346649c7fe2260a2ce60dbd83dfcd32480852
- SHA512
  
  95ba4cbaffa059a489672228c9f33d261a1ac4d53109d048eaf6d829bf4110f616ba37f5cde6f34ac2469ca3f13c179da4dee0141c4e77a169ca2a6361a7e793
- SSDEEP
  
  3072:0vcP6pi6fZbv4c9nhaWEUZA9msMG4qBMBlOreNh4s7GsPQt2ZpaqXIVNtoMjRHtn:0vcPkfVzh2m5qOl2e0sZaqXS0M1Ht
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2