060629c42219ad3034ad548092d97cce0d0633fb26d8b1665d79c98571dee3c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5dfdb4b992cf261e12a7b9f707cd631_JaffaCakes118
Size

257KB
Sample

240925-m8bl8a1hmj
MD5

f5dfdb4b992cf261e12a7b9f707cd631
SHA1

09f52fe63b11882ae95ba5f7558ff1ccdff4c2e5
SHA256

060629c42219ad3034ad548092d97cce0d0633fb26d8b1665d79c98571dee3c8
SHA512

b9196f29dab8f0d3aa0e88186e8407ce0a487ff387ca7b94bd37c04a5a0758edf617ee8a642b8b92bfea06329f2f1e9d8c7ef2263e0f9fd08af2a99295f421fd
SSDEEP

3072:g9YCtJHWe6yAWCvblAd+XVbLENNGwgDNaxnTr6KkunNEyFIbee0w1UA3Ms14C8Za:gY6F6yAxRAW6gUZuJ2NEAw1UJea4x7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f5dfdb4b992cf261e12a7b9f707cd631_JaffaCakes118
- Size
  
  257KB
- MD5
  
  f5dfdb4b992cf261e12a7b9f707cd631
- SHA1
  
  09f52fe63b11882ae95ba5f7558ff1ccdff4c2e5
- SHA256
  
  060629c42219ad3034ad548092d97cce0d0633fb26d8b1665d79c98571dee3c8
- SHA512
  
  b9196f29dab8f0d3aa0e88186e8407ce0a487ff387ca7b94bd37c04a5a0758edf617ee8a642b8b92bfea06329f2f1e9d8c7ef2263e0f9fd08af2a99295f421fd
- SSDEEP
  
  3072:g9YCtJHWe6yAWCvblAd+XVbLENNGwgDNaxnTr6KkunNEyFIbee0w1UA3Ms14C8Za:gY6F6yAxRAW6gUZuJ2NEAw1UJea4x7
Score

7^/10

discovery
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2