5460cb45489346b35180bf9abdb466f0394bb722c45ec6862befa33351c05ade | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d69331304b5705df6aaccf856f0bbad_JaffaCakes118
Size

91KB
Sample

240625-kkzb9ssekm
MD5

0d69331304b5705df6aaccf856f0bbad
SHA1

8a4514b9d93c3cef732ee3e459c926eb78b48506
SHA256

5460cb45489346b35180bf9abdb466f0394bb722c45ec6862befa33351c05ade
SHA512

15c24fe153207552b34c4bce4e8f6e942db48300a6af7281027cc82257c8730a27b2eb1993a4ed32e895ed22af5659b65581161d96d610a79240c0b967f8d524
SSDEEP

1536:6WRdQ9Sh7J4Ib1Ug6ookB8C9qdSNCpjFbM6jjF2d77QA4lg:LQ4Jr1Ug6ovrzNClFbM6HF2d77QA4K

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0d69331304b5705df6aaccf856f0bbad_JaffaCakes118
- Size
  
  91KB
- MD5
  
  0d69331304b5705df6aaccf856f0bbad
- SHA1
  
  8a4514b9d93c3cef732ee3e459c926eb78b48506
- SHA256
  
  5460cb45489346b35180bf9abdb466f0394bb722c45ec6862befa33351c05ade
- SHA512
  
  15c24fe153207552b34c4bce4e8f6e942db48300a6af7281027cc82257c8730a27b2eb1993a4ed32e895ed22af5659b65581161d96d610a79240c0b967f8d524
- SSDEEP
  
  1536:6WRdQ9Sh7J4Ib1Ug6ookB8C9qdSNCpjFbM6jjF2d77QA4lg:LQ4Jr1Ug6ovrzNClFbM6HF2d77QA4K
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2