991c02642077dbf3179f88a0364f68de9f7e5e3704dde3dec87238d779c6eaa0 | Triage

Sharing

General

Target

2a171268b910b9efe97d7663487603b8_JaffaCakes118
Size

295KB
Sample

240707-2z7evs1aml
MD5

2a171268b910b9efe97d7663487603b8
SHA1

d55f941f0a6e9d9354c8a0f44427428c9ba7a932
SHA256

991c02642077dbf3179f88a0364f68de9f7e5e3704dde3dec87238d779c6eaa0
SHA512

ca4b602acede37ee5ad50e3cbfacab9a5e14f0d393b3b0060d169a6e36dd182e8e515b0ceda6d791cb0eb0f330849bc935ff517c105df53fc3c279844cd349c7
SSDEEP

6144:S2gon3w1WG6wPTqbhJTtNSDpxDPcfp3U8p:SWnAwC2FJ5NTp

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2a171268b910b9efe97d7663487603b8_JaffaCakes118
- Size
  
  295KB
- MD5
  
  2a171268b910b9efe97d7663487603b8
- SHA1
  
  d55f941f0a6e9d9354c8a0f44427428c9ba7a932
- SHA256
  
  991c02642077dbf3179f88a0364f68de9f7e5e3704dde3dec87238d779c6eaa0
- SHA512
  
  ca4b602acede37ee5ad50e3cbfacab9a5e14f0d393b3b0060d169a6e36dd182e8e515b0ceda6d791cb0eb0f330849bc935ff517c105df53fc3c279844cd349c7
- SSDEEP
  
  6144:S2gon3w1WG6wPTqbhJTtNSDpxDPcfp3U8p:SWnAwC2FJ5NTp
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2