025ce686181520bce308d7880531662a911f0264c7a5b50c7bff4a60f52cd6e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0264b52982a25856d5cb584d91553875_JaffaCakes118
Size

327KB
Sample

240930-vmn97azfmc
MD5

0264b52982a25856d5cb584d91553875
SHA1

2755e4c292ff2b9efe23e0c3c47efaaf3e3b3f3c
SHA256

025ce686181520bce308d7880531662a911f0264c7a5b50c7bff4a60f52cd6e5
SHA512

bd7311a1f4ed2cf58ac6707eba4d287cb3ffd1cfeeac02a21f224596cd8faa7fea8d9382cd1bf106cd1e0dfff48db1113e6d270a5f05315d5d115d5d97c168cc
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:Rr4iu6/eIo4Rsw33AtsmQ/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0264b52982a25856d5cb584d91553875_JaffaCakes118
- Size
  
  327KB
- MD5
  
  0264b52982a25856d5cb584d91553875
- SHA1
  
  2755e4c292ff2b9efe23e0c3c47efaaf3e3b3f3c
- SHA256
  
  025ce686181520bce308d7880531662a911f0264c7a5b50c7bff4a60f52cd6e5
- SHA512
  
  bd7311a1f4ed2cf58ac6707eba4d287cb3ffd1cfeeac02a21f224596cd8faa7fea8d9382cd1bf106cd1e0dfff48db1113e6d270a5f05315d5d115d5d97c168cc
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:Rr4iu6/eIo4Rsw33AtsmQ/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2