a4e67e922ae99aa76a534398d0dd875c95811917ab8bd2aead6726df700d328f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0615cfa22f753d16ab707f84211d79dc_JaffaCakes118
Size

32KB
Sample

240428-z22ahshc78
MD5

0615cfa22f753d16ab707f84211d79dc
SHA1

77224b7e0836fd020cf7866adf337c2f93cfbcc9
SHA256

a4e67e922ae99aa76a534398d0dd875c95811917ab8bd2aead6726df700d328f
SHA512

e8a2b357dd7f16e4205f3ec882366e613ef3ffade1fdc60f12e039a373fe17aacb97a60badebd98444a09ebb1626e0fb84f70623a0a7828669984fe248d234c9
SSDEEP

384:aLdVv/jNmocDsU1VW3XtQNbFzbW6IIwr3x+HPi2VmdKxaskLDOHYCFXPzlpmIMxB:EdZ/jNmfsUj7vBpVSVmF79mx71B

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  0615cfa22f753d16ab707f84211d79dc_JaffaCakes118
- Size
  
  32KB
- MD5
  
  0615cfa22f753d16ab707f84211d79dc
- SHA1
  
  77224b7e0836fd020cf7866adf337c2f93cfbcc9
- SHA256
  
  a4e67e922ae99aa76a534398d0dd875c95811917ab8bd2aead6726df700d328f
- SHA512
  
  e8a2b357dd7f16e4205f3ec882366e613ef3ffade1fdc60f12e039a373fe17aacb97a60badebd98444a09ebb1626e0fb84f70623a0a7828669984fe248d234c9
- SSDEEP
  
  384:aLdVv/jNmocDsU1VW3XtQNbFzbW6IIwr3x+HPi2VmdKxaskLDOHYCFXPzlpmIMxB:EdZ/jNmfsUj7vBpVSVmF79mx71B
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence