95e79e7783e3a6ef3f8a4975458373fb0ddd13bb0cb52557d4e1f5523af81f86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

306a875ffbe1e887eb6b72f60cc7abb3_JaffaCakes118
Size

316KB
Sample

241010-r4h8qa1bmh
MD5

306a875ffbe1e887eb6b72f60cc7abb3
SHA1

1d7acc4d909884f3a42883aff8afa8b92faaae91
SHA256

95e79e7783e3a6ef3f8a4975458373fb0ddd13bb0cb52557d4e1f5523af81f86
SHA512

63cc3f3dc95caaaf175b8eae0fea28407ef40a46d6cd9bb2d2ec2ca02c1cf84b9c01bae2c95bb435f6388a7f87df7baabbe2a96679a8620c44e05bbd5acc1414
SSDEEP

6144:hr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDAr6:hr+kuveY3hdLzrfn5A1KtBZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  306a875ffbe1e887eb6b72f60cc7abb3_JaffaCakes118
- Size
  
  316KB
- MD5
  
  306a875ffbe1e887eb6b72f60cc7abb3
- SHA1
  
  1d7acc4d909884f3a42883aff8afa8b92faaae91
- SHA256
  
  95e79e7783e3a6ef3f8a4975458373fb0ddd13bb0cb52557d4e1f5523af81f86
- SHA512
  
  63cc3f3dc95caaaf175b8eae0fea28407ef40a46d6cd9bb2d2ec2ca02c1cf84b9c01bae2c95bb435f6388a7f87df7baabbe2a96679a8620c44e05bbd5acc1414
- SSDEEP
  
  6144:hr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDAr6:hr+kuveY3hdLzrfn5A1KtBZ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2