8b2ffb953e49d3320e61ee07766fc35cee9007b480b8e16ba9dd627808f4bc2f | Triage

Sharing

General

Target

05e376af22e6f5d93948013ac16defdb_JaffaCakes118
Size

304KB
Sample

241001-p4ngbszgqn
MD5

05e376af22e6f5d93948013ac16defdb
SHA1

665d345d52731c6ae4fafaa04279849d5626b0f5
SHA256

8b2ffb953e49d3320e61ee07766fc35cee9007b480b8e16ba9dd627808f4bc2f
SHA512

889294970cb867b9e87f5c3680134d1223e6c5d15fdfc89ac6aef6147c0d9b6df86112a7898739569f37e1ee7069c82c3fd0fa4b36c1041f6876c082219b7091
SSDEEP

6144:GrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7O:GrkX63yRl1uqM+gs+2RLTf+QLShvQx7O

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  05e376af22e6f5d93948013ac16defdb_JaffaCakes118
- Size
  
  304KB
- MD5
  
  05e376af22e6f5d93948013ac16defdb
- SHA1
  
  665d345d52731c6ae4fafaa04279849d5626b0f5
- SHA256
  
  8b2ffb953e49d3320e61ee07766fc35cee9007b480b8e16ba9dd627808f4bc2f
- SHA512
  
  889294970cb867b9e87f5c3680134d1223e6c5d15fdfc89ac6aef6147c0d9b6df86112a7898739569f37e1ee7069c82c3fd0fa4b36c1041f6876c082219b7091
- SSDEEP
  
  6144:GrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7O:GrkX63yRl1uqM+gs+2RLTf+QLShvQx7O
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2