eb099f0c70cde5af0179afaee2cb94c0d77dde9fbd29566cb028bfdf5b8b492a | Triage

Sharing

General

Target

f0e789401f0241152691c67218a19d68_JaffaCakes118
Size

349KB
Sample

240415-m5pdxafb3s
MD5

f0e789401f0241152691c67218a19d68
SHA1

bb08b3dd40d71d3908b4623e53aa728a81c95174
SHA256

eb099f0c70cde5af0179afaee2cb94c0d77dde9fbd29566cb028bfdf5b8b492a
SHA512

adc849e6e410ba18dd0761451505b270cff41d89d55891703ca90f671d8469288fd796e15d2fd7d52e1c70ca22c964804a5b00259b587a9de1a3fbbcecfdee69
SSDEEP

6144:OujLtlQQBrZJ0mMm0P7Px3XN7oa7jxhKOd8A36W0fTV5n:TtlQErZJGm0zZNxQfA3z0fTV5n

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  f0e789401f0241152691c67218a19d68_JaffaCakes118
- Size
  
  349KB
- MD5
  
  f0e789401f0241152691c67218a19d68
- SHA1
  
  bb08b3dd40d71d3908b4623e53aa728a81c95174
- SHA256
  
  eb099f0c70cde5af0179afaee2cb94c0d77dde9fbd29566cb028bfdf5b8b492a
- SHA512
  
  adc849e6e410ba18dd0761451505b270cff41d89d55891703ca90f671d8469288fd796e15d2fd7d52e1c70ca22c964804a5b00259b587a9de1a3fbbcecfdee69
- SSDEEP
  
  6144:OujLtlQQBrZJ0mMm0P7Px3XN7oa7jxhKOd8A36W0fTV5n:TtlQErZJGm0zZNxQfA3z0fTV5n
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2