99ed38dbaf36fac93f51546bf493e7e1d0a153ae749c54ae209cceb477009016 | Triage

Sharing

General

Target

7134299c38eef0797a7cf18f83b990ad_JaffaCakes118
Size

814KB
Sample

240525-hwk8nsab2w
MD5

7134299c38eef0797a7cf18f83b990ad
SHA1

b3fe69b8b0f7000bc37bba828729308dd19ad3dc
SHA256

99ed38dbaf36fac93f51546bf493e7e1d0a153ae749c54ae209cceb477009016
SHA512

b00ab5fddab5897e2c2229b8055bcd4d6f6b4002170faca8d055f864416384250712da3b909a27bedb3aecd56e331f683a2b79c566018976e36c408242bc8ce9
SSDEEP

12288:tL9mecuR60/prXGUU+sz725tNckt4jeviFiyylKTFvEAK7jD0Z/YHW29c:tL9medN/9pU+smzq4lKT5Bkj6/8Z9c

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  7134299c38eef0797a7cf18f83b990ad_JaffaCakes118
- Size
  
  814KB
- MD5
  
  7134299c38eef0797a7cf18f83b990ad
- SHA1
  
  b3fe69b8b0f7000bc37bba828729308dd19ad3dc
- SHA256
  
  99ed38dbaf36fac93f51546bf493e7e1d0a153ae749c54ae209cceb477009016
- SHA512
  
  b00ab5fddab5897e2c2229b8055bcd4d6f6b4002170faca8d055f864416384250712da3b909a27bedb3aecd56e331f683a2b79c566018976e36c408242bc8ce9
- SSDEEP
  
  12288:tL9mecuR60/prXGUU+sz725tNckt4jeviFiyylKTFvEAK7jD0Z/YHW29c:tL9medN/9pU+smzq4lKT5Bkj6/8Z9c
Score

7^/10

evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2