96c39166f9fba49bf6b56f3620deadc2a884c24291f3edeee8b938dc975fe78d | Triage

Sharing

General

Target

2b5a2e907c537cb715ecfd5f5c04066a_JaffaCakes118
Size

48KB
Sample

240708-hght1axbqr
MD5

2b5a2e907c537cb715ecfd5f5c04066a
SHA1

ae8314df4cd454896a61127bcef61b43165dab21
SHA256

96c39166f9fba49bf6b56f3620deadc2a884c24291f3edeee8b938dc975fe78d
SHA512

4478a3a651b28655dccaee389ff05d94176f63459e9c458e91ceb51670d2542cfbd44301e24243bd0fda84e7568c501f4f90b4f7f7ad71c2ebd24fa18db88c5c
SSDEEP

768:/jUyRzVmldlJb85sz2HUWHmbh/dUPCf4PJm8eLH6Y1azw3cqjoepceJokDbGQ2QW:7UyRsJY5szAUTkFz/w3cqjoepskDv2y

Score

7^/10

evasion execution trojan

Malware Config

Targets

- Target
  
  2b5a2e907c537cb715ecfd5f5c04066a_JaffaCakes118
- Size
  
  48KB
- MD5
  
  2b5a2e907c537cb715ecfd5f5c04066a
- SHA1
  
  ae8314df4cd454896a61127bcef61b43165dab21
- SHA256
  
  96c39166f9fba49bf6b56f3620deadc2a884c24291f3edeee8b938dc975fe78d
- SHA512
  
  4478a3a651b28655dccaee389ff05d94176f63459e9c458e91ceb51670d2542cfbd44301e24243bd0fda84e7568c501f4f90b4f7f7ad71c2ebd24fa18db88c5c
- SSDEEP
  
  768:/jUyRzVmldlJb85sz2HUWHmbh/dUPCf4PJm8eLH6Y1azw3cqjoepceJokDbGQ2QW:7UyRsJY5szAUTkFz/w3cqjoepskDv2y
Score

7^/10

evasion execution trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionexecutiontrojan

behavioral2

evasionexecutiontrojan