7eba81efe1eaa52acd382468946e21f793d58e894487b3cd6da54c6f4f184a8e | Triage

Sharing

General

Target

55135ce176215ad3cd2d47cbc6e2e4c6_JaffaCakes118
Size

312KB
Sample

241018-dcj42swarl
MD5

55135ce176215ad3cd2d47cbc6e2e4c6
SHA1

8213cc881200d635e59edb80975b64b29e709ac4
SHA256

7eba81efe1eaa52acd382468946e21f793d58e894487b3cd6da54c6f4f184a8e
SHA512

9dde8281b0baff2cdfc75266c8fbea94e7266eb51319d7fd8af4b955d4d66e3bfc69c304686112aaebeb94cda4df1cdb352587fafd00aecc6c75a81eaadf5386
SSDEEP

6144:vrVu6Y0JQBkQRl7174NpNUM+UHs+Jk5yZ0hbJDSKxFr14:vrVu63yRl1uqM+gs++UZ0hbJDrJ14

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  55135ce176215ad3cd2d47cbc6e2e4c6_JaffaCakes118
- Size
  
  312KB
- MD5
  
  55135ce176215ad3cd2d47cbc6e2e4c6
- SHA1
  
  8213cc881200d635e59edb80975b64b29e709ac4
- SHA256
  
  7eba81efe1eaa52acd382468946e21f793d58e894487b3cd6da54c6f4f184a8e
- SHA512
  
  9dde8281b0baff2cdfc75266c8fbea94e7266eb51319d7fd8af4b955d4d66e3bfc69c304686112aaebeb94cda4df1cdb352587fafd00aecc6c75a81eaadf5386
- SSDEEP
  
  6144:vrVu6Y0JQBkQRl7174NpNUM+UHs+Jk5yZ0hbJDSKxFr14:vrVu63yRl1uqM+gs++UZ0hbJDrJ14
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2