94b1c3f7c5b55c8d390fd78af2858bf64970c9cde129f2314a4c65806b394c15 | Triage

Sharing

General

Target

55991fdf80f05fc5a68f01e0798237d1_JaffaCakes118
Size

315KB
Sample

241018-fmy23a1gnj
MD5

55991fdf80f05fc5a68f01e0798237d1
SHA1

6e77d4643bb8209e1168ecb430f0c69e946d0b16
SHA256

94b1c3f7c5b55c8d390fd78af2858bf64970c9cde129f2314a4c65806b394c15
SHA512

f25c2ff1b579c4c4116c87e7d3b2ee770184c57546aa8a2472e7930fe3fe1404095b6f4645bf5df7bd1ee0e7aa299fbf92341967d90abb808cd2fccb34e877c0
SSDEEP

6144:crYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZb:crdkuveY3CvI5Zdkj6OEu1HSb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  55991fdf80f05fc5a68f01e0798237d1_JaffaCakes118
- Size
  
  315KB
- MD5
  
  55991fdf80f05fc5a68f01e0798237d1
- SHA1
  
  6e77d4643bb8209e1168ecb430f0c69e946d0b16
- SHA256
  
  94b1c3f7c5b55c8d390fd78af2858bf64970c9cde129f2314a4c65806b394c15
- SHA512
  
  f25c2ff1b579c4c4116c87e7d3b2ee770184c57546aa8a2472e7930fe3fe1404095b6f4645bf5df7bd1ee0e7aa299fbf92341967d90abb808cd2fccb34e877c0
- SSDEEP
  
  6144:crYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZb:crdkuveY3CvI5Zdkj6OEu1HSb
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2