5aa02be2838e8e150095a6d7bdf03fd9da6b9de8f30029cac713cb37a102bc75 | Triage

Sharing

General

Target

267b38cf2ae9f58fff9edea4d90c9959_JaffaCakes118
Size

72KB
Sample

240704-2jrz8svhkf
MD5

267b38cf2ae9f58fff9edea4d90c9959
SHA1

f8de865ca329b70f75af4d9eab168562752f98fa
SHA256

5aa02be2838e8e150095a6d7bdf03fd9da6b9de8f30029cac713cb37a102bc75
SHA512

c4470cf2ed701a262867f63d27baf8fdd1e933825e4d99c89c6cfaff8da2b699ba7d3def5c8844f71dfdb845481148e3e1db9aea41f2b927bffa115ee999211f
SSDEEP

1536:LB9i01Ha/G0bqgKiLlVVO07AOgRXi6S12g4hdeTpGXJmD:3HwGVQLlXO07AHXtI27hdehD

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  267b38cf2ae9f58fff9edea4d90c9959_JaffaCakes118
- Size
  
  72KB
- MD5
  
  267b38cf2ae9f58fff9edea4d90c9959
- SHA1
  
  f8de865ca329b70f75af4d9eab168562752f98fa
- SHA256
  
  5aa02be2838e8e150095a6d7bdf03fd9da6b9de8f30029cac713cb37a102bc75
- SHA512
  
  c4470cf2ed701a262867f63d27baf8fdd1e933825e4d99c89c6cfaff8da2b699ba7d3def5c8844f71dfdb845481148e3e1db9aea41f2b927bffa115ee999211f
- SSDEEP
  
  1536:LB9i01Ha/G0bqgKiLlVVO07AOgRXi6S12g4hdeTpGXJmD:3HwGVQLlXO07AHXtI27hdehD
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2