0694e94b80bd3c2a000f0ee6231a01ebd9872c2144f6e56607cc5d7808f9afc6 | Triage

Sharing

General

Target

fde4261782848225d165d1ddcca64174_JaffaCakes118
Size

321KB
Sample

240929-f8tpgavaka
MD5

fde4261782848225d165d1ddcca64174
SHA1

0926f12fd135a1589083844e316a0a72d54b7974
SHA256

0694e94b80bd3c2a000f0ee6231a01ebd9872c2144f6e56607cc5d7808f9afc6
SHA512

c70bc5a38a8c3bd54c1bd4945af35e1ad44aa028d084600fb17c1d8aafcbdcb75174442a619dfdae952e5c9e3e83e9506457391af3849d975c901be6eeaee4a8
SSDEEP

3072:ntPQsBBD1XsNsWW0eSZDsKU3PCkycEeJpfnf9+Ko4SalwE98ERSdxNl44e9RC0u3:tGsWW0ls/CHcE6pff9/SK9FMBlSpLXhs

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  fde4261782848225d165d1ddcca64174_JaffaCakes118
- Size
  
  321KB
- MD5
  
  fde4261782848225d165d1ddcca64174
- SHA1
  
  0926f12fd135a1589083844e316a0a72d54b7974
- SHA256
  
  0694e94b80bd3c2a000f0ee6231a01ebd9872c2144f6e56607cc5d7808f9afc6
- SHA512
  
  c70bc5a38a8c3bd54c1bd4945af35e1ad44aa028d084600fb17c1d8aafcbdcb75174442a619dfdae952e5c9e3e83e9506457391af3849d975c901be6eeaee4a8
- SSDEEP
  
  3072:ntPQsBBD1XsNsWW0eSZDsKU3PCkycEeJpfnf9+Ko4SalwE98ERSdxNl44e9RC0u3:tGsWW0ls/CHcE6pff9/SK9FMBlSpLXhs
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2