f72f4fc411458ae685b8448f0b487c1ac64f5b247378967422ef8ac274841d43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12804f23448709966002924f1e1dd4a5_JaffaCakes118
Size

327KB
Sample

241004-jwwvvasfrm
MD5

12804f23448709966002924f1e1dd4a5
SHA1

8cc5d9bb5f3c138227aa3facccd010106102baf0
SHA256

f72f4fc411458ae685b8448f0b487c1ac64f5b247378967422ef8ac274841d43
SHA512

6e416d8dc59434403b0594d50d1937701ca0a7784d94025b303d4549dc3ff5a76190934cea602e0b2e90fd7fa93c1cd3ed738c7c59688c131c9f6ead02189279
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F0:Jr4iu6/eIo4Rsw33AtsmQ9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  12804f23448709966002924f1e1dd4a5_JaffaCakes118
- Size
  
  327KB
- MD5
  
  12804f23448709966002924f1e1dd4a5
- SHA1
  
  8cc5d9bb5f3c138227aa3facccd010106102baf0
- SHA256
  
  f72f4fc411458ae685b8448f0b487c1ac64f5b247378967422ef8ac274841d43
- SHA512
  
  6e416d8dc59434403b0594d50d1937701ca0a7784d94025b303d4549dc3ff5a76190934cea602e0b2e90fd7fa93c1cd3ed738c7c59688c131c9f6ead02189279
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F0:Jr4iu6/eIo4Rsw33AtsmQ9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2