b4cec7ccc2c938a954c133a9f7f50163a9b356da275b62ac62753af42e05f896 | Triage

Sharing

General

Target

282467da40af2dc16e685a3ff73aae4d_JaffaCakes118
Size

327KB
Sample

241009-bednyawfnk
MD5

282467da40af2dc16e685a3ff73aae4d
SHA1

7fff39c92d5c313658ac6aff7d54b8f16f2612da
SHA256

b4cec7ccc2c938a954c133a9f7f50163a9b356da275b62ac62753af42e05f896
SHA512

d3c2e1509339545257ed12abc75ff87be801594300acbfb7f9adf898f8f35ea14beb6c00c042c61b7584f0ac393d7f81c6a3f089f5e23f731e18c1bd9f2c3cea
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FG:Zr4iu6/eIo4Rsw33AtsmQ/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  282467da40af2dc16e685a3ff73aae4d_JaffaCakes118
- Size
  
  327KB
- MD5
  
  282467da40af2dc16e685a3ff73aae4d
- SHA1
  
  7fff39c92d5c313658ac6aff7d54b8f16f2612da
- SHA256
  
  b4cec7ccc2c938a954c133a9f7f50163a9b356da275b62ac62753af42e05f896
- SHA512
  
  d3c2e1509339545257ed12abc75ff87be801594300acbfb7f9adf898f8f35ea14beb6c00c042c61b7584f0ac393d7f81c6a3f089f5e23f731e18c1bd9f2c3cea
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FG:Zr4iu6/eIo4Rsw33AtsmQ/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2