cb547f21e903e686c56f0e5df567ccc65462e85b3802adce66bc9c081d818a3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93c38c107a6bbc06ef10acf04366aca_JaffaCakes118
Size

61KB
Sample

240409-e8t5kaeh48
MD5

e93c38c107a6bbc06ef10acf04366aca
SHA1

5649eab95ca67bd709db9f9bf9eb5857617d14b4
SHA256

cb547f21e903e686c56f0e5df567ccc65462e85b3802adce66bc9c081d818a3f
SHA512

aed050ca9e7fa0b957463de4c6d2123a5aca020cf7a45415914863ceb9497b7a16b43c08bd8da89ad3049dffdb968e07951ad1a4a6ea49211149b36871662db2
SSDEEP

768:iM7O0GTipbBNcJ1wjHQwUPdKAZbyAD4ZVAuEPTeWq6umT/9O3x+DUYh3zXp2F5ke:iDVBwviKAJyAD4ZVAHPTc6uSo82Iot

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e93c38c107a6bbc06ef10acf04366aca_JaffaCakes118
- Size
  
  61KB
- MD5
  
  e93c38c107a6bbc06ef10acf04366aca
- SHA1
  
  5649eab95ca67bd709db9f9bf9eb5857617d14b4
- SHA256
  
  cb547f21e903e686c56f0e5df567ccc65462e85b3802adce66bc9c081d818a3f
- SHA512
  
  aed050ca9e7fa0b957463de4c6d2123a5aca020cf7a45415914863ceb9497b7a16b43c08bd8da89ad3049dffdb968e07951ad1a4a6ea49211149b36871662db2
- SSDEEP
  
  768:iM7O0GTipbBNcJ1wjHQwUPdKAZbyAD4ZVAuEPTeWq6umT/9O3x+DUYh3zXp2F5ke:iDVBwviKAJyAD4ZVAHPTc6uSo82Iot
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2