93e1ce2ad426b35b9d20f23bfe38d2fc06141ae161dfb09d2a0884a726196c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2698c8a056c6b34920d20ecafbc07a90_JaffaCakes118
Size

304KB
Sample

241008-2pyd7svdlm
MD5

2698c8a056c6b34920d20ecafbc07a90
SHA1

08d1b041b207c95633a35ae937aef15ec8e553ce
SHA256

93e1ce2ad426b35b9d20f23bfe38d2fc06141ae161dfb09d2a0884a726196c20
SHA512

14dd97a5149c8cb610c2ad491546b7d5d54238598e8434c4f336c78343c9f3ab0e6551477f9a466e0a553161d2c672c58f4ec97dc3c36f3cc7cd8c6ebfa7a784
SSDEEP

6144:3rkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7y:3rkX63yRl1uqM+gs+2RLTf+QLShvQx7y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2698c8a056c6b34920d20ecafbc07a90_JaffaCakes118
- Size
  
  304KB
- MD5
  
  2698c8a056c6b34920d20ecafbc07a90
- SHA1
  
  08d1b041b207c95633a35ae937aef15ec8e553ce
- SHA256
  
  93e1ce2ad426b35b9d20f23bfe38d2fc06141ae161dfb09d2a0884a726196c20
- SHA512
  
  14dd97a5149c8cb610c2ad491546b7d5d54238598e8434c4f336c78343c9f3ab0e6551477f9a466e0a553161d2c672c58f4ec97dc3c36f3cc7cd8c6ebfa7a784
- SSDEEP
  
  6144:3rkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7y:3rkX63yRl1uqM+gs+2RLTf+QLShvQx7y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2