c1b76fb9abad61b9c655af3a6975f87524bce5d6ec15b91216c0d971e57cef29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2676ce90e4bfde4290edbacb7af2217a_JaffaCakes118
Size

316KB
Sample

241008-2gf5ysxhnb
MD5

2676ce90e4bfde4290edbacb7af2217a
SHA1

60b1ba2da67a72c461b861af813edd002344ffe1
SHA256

c1b76fb9abad61b9c655af3a6975f87524bce5d6ec15b91216c0d971e57cef29
SHA512

8e3ffc3752ad7e0174467517b46674e7b8c41d3054b7d15bda77894cea9e50f807e33f0d811ccd6d24ec1a1fb5b7d79ddaa7622f01396f545b334f4d866866ec
SSDEEP

6144:prvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVz:prkkuveY3zhlV6tmDxzwVz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2676ce90e4bfde4290edbacb7af2217a_JaffaCakes118
- Size
  
  316KB
- MD5
  
  2676ce90e4bfde4290edbacb7af2217a
- SHA1
  
  60b1ba2da67a72c461b861af813edd002344ffe1
- SHA256
  
  c1b76fb9abad61b9c655af3a6975f87524bce5d6ec15b91216c0d971e57cef29
- SHA512
  
  8e3ffc3752ad7e0174467517b46674e7b8c41d3054b7d15bda77894cea9e50f807e33f0d811ccd6d24ec1a1fb5b7d79ddaa7622f01396f545b334f4d866866ec
- SSDEEP
  
  6144:prvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVz:prkkuveY3zhlV6tmDxzwVz
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2