7867d8b6981b4fb546052fa5058d4251d17e6f2057a41b2c1b8a01d3a3130caa | Triage

Sharing

General

Target

fccff24fa5033b1a521e46cca502c28e_JaffaCakes118
Size

327KB
Sample

240928-v7zxesxgpj
MD5

fccff24fa5033b1a521e46cca502c28e
SHA1

d1a61b97d6afcac6d8468af825f2f4146cd7b2df
SHA256

7867d8b6981b4fb546052fa5058d4251d17e6f2057a41b2c1b8a01d3a3130caa
SHA512

389952b8e5c086da94b11d4f788bf2b5bc7301e119934e3e7d1a9fe636430ebe19c6d0ae7a3a1033a47cb93c760ca8d1d2607e31d9ce8d30ce4e901c0e86a803
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F5:Rr4iu6/eIo4Rsw33AtsmQE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fccff24fa5033b1a521e46cca502c28e_JaffaCakes118
- Size
  
  327KB
- MD5
  
  fccff24fa5033b1a521e46cca502c28e
- SHA1
  
  d1a61b97d6afcac6d8468af825f2f4146cd7b2df
- SHA256
  
  7867d8b6981b4fb546052fa5058d4251d17e6f2057a41b2c1b8a01d3a3130caa
- SHA512
  
  389952b8e5c086da94b11d4f788bf2b5bc7301e119934e3e7d1a9fe636430ebe19c6d0ae7a3a1033a47cb93c760ca8d1d2607e31d9ce8d30ce4e901c0e86a803
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F5:Rr4iu6/eIo4Rsw33AtsmQE
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2