010e86d605d3c2e9935ef9f68a7245b17e56ca751e1176d2d627762402c82a93 | Triage

Sharing

General

Target

fa800f1cf2ae9ecc1a4b67b076053f0a_JaffaCakes118
Size

52KB
Sample

240927-qwxwgaxdmd
MD5

fa800f1cf2ae9ecc1a4b67b076053f0a
SHA1

5862a76c254e38d320d5de951f7fb0ab0200e5ef
SHA256

010e86d605d3c2e9935ef9f68a7245b17e56ca751e1176d2d627762402c82a93
SHA512

44941a9506ecfc403ecee916dc4da73ac2e3b7a63513e309ae40f191f1e2d0a511f34f4ec4749a36d44aac1775ee6f25b661fc40393b01b38645f41c4af80b0f
SSDEEP

768:6LfEahZhzmGnyj5LhhfRttcpK2Ye2nSc:6LfnhTaGnyjzhfRD252l

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  fa800f1cf2ae9ecc1a4b67b076053f0a_JaffaCakes118
- Size
  
  52KB
- MD5
  
  fa800f1cf2ae9ecc1a4b67b076053f0a
- SHA1
  
  5862a76c254e38d320d5de951f7fb0ab0200e5ef
- SHA256
  
  010e86d605d3c2e9935ef9f68a7245b17e56ca751e1176d2d627762402c82a93
- SHA512
  
  44941a9506ecfc403ecee916dc4da73ac2e3b7a63513e309ae40f191f1e2d0a511f34f4ec4749a36d44aac1775ee6f25b661fc40393b01b38645f41c4af80b0f
- SSDEEP
  
  768:6LfEahZhzmGnyj5LhhfRttcpK2Ye2nSc:6LfnhTaGnyjzhfRD252l
Score

6^/10

discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2