ffe9121c0aa6c237d47d7c8eff99d721071197408b383ad417cfd735d8563ce6 | Triage

Sharing

General

Target

2b3f379951d31d14aa36e3eb9b6bc1c4_JaffaCakes118
Size

104KB
Sample

240708-gtrr1axgrb
MD5

2b3f379951d31d14aa36e3eb9b6bc1c4
SHA1

38344d288c57ee60d2c3c0a8900f3fed6b21d2e8
SHA256

ffe9121c0aa6c237d47d7c8eff99d721071197408b383ad417cfd735d8563ce6
SHA512

16f60400a8184488886cf67b67b48c0c22b1a7f1982cd106d5b4ee6aa35cf60b7e604bb3a6a4913399ce38de90e2628f5dc6a22473e61fd166bf8324a8b5cec0
SSDEEP

1536:kAexJ3pTnTHUFUn9PAy3p+hr0yCtPMT6xzpWoH0xc2xt1ahrvw:lexJ3lBdpkoxzpWoH0xcWt1aC

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2b3f379951d31d14aa36e3eb9b6bc1c4_JaffaCakes118
- Size
  
  104KB
- MD5
  
  2b3f379951d31d14aa36e3eb9b6bc1c4
- SHA1
  
  38344d288c57ee60d2c3c0a8900f3fed6b21d2e8
- SHA256
  
  ffe9121c0aa6c237d47d7c8eff99d721071197408b383ad417cfd735d8563ce6
- SHA512
  
  16f60400a8184488886cf67b67b48c0c22b1a7f1982cd106d5b4ee6aa35cf60b7e604bb3a6a4913399ce38de90e2628f5dc6a22473e61fd166bf8324a8b5cec0
- SSDEEP
  
  1536:kAexJ3pTnTHUFUn9PAy3p+hr0yCtPMT6xzpWoH0xc2xt1ahrvw:lexJ3lBdpkoxzpWoH0xcWt1aC
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies system executable filetype association
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2