83f957f12c1f215e5823f2654817dfffe2c2b4e6ae15e501a471c6d01e732abf | Triage

Sharing

General

Target

fdcf1647e968a9d7de38ce5dc4e3efa4_JaffaCakes118
Size

5.0MB
Sample

240929-e7wxrssgrc
MD5

fdcf1647e968a9d7de38ce5dc4e3efa4
SHA1

1ed5e4399abb38b3af9b2fa78f1d436293d908cf
SHA256

83f957f12c1f215e5823f2654817dfffe2c2b4e6ae15e501a471c6d01e732abf
SHA512

f0e727710aeb3dc9376b87ea3f8cd6911a87d69dac0878994068d2de0c2e15b385677df1ffd7f1ac32cd180a5fe97966da17b07eab9b1260758243c7c879c766
SSDEEP

98304:D22YeKFojewsUezO5RCA1dJg1VL0rmNKQpMD5RVxIZsw:y1eKFU9d11rmNVpMD5RHYT

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  fdcf1647e968a9d7de38ce5dc4e3efa4_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  fdcf1647e968a9d7de38ce5dc4e3efa4
- SHA1
  
  1ed5e4399abb38b3af9b2fa78f1d436293d908cf
- SHA256
  
  83f957f12c1f215e5823f2654817dfffe2c2b4e6ae15e501a471c6d01e732abf
- SHA512
  
  f0e727710aeb3dc9376b87ea3f8cd6911a87d69dac0878994068d2de0c2e15b385677df1ffd7f1ac32cd180a5fe97966da17b07eab9b1260758243c7c879c766
- SSDEEP
  
  98304:D22YeKFojewsUezO5RCA1dJg1VL0rmNKQpMD5RVxIZsw:y1eKFU9d11rmNVpMD5RHYT
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2