34fdbb13722e0a6245f547d05c4858bfcc6b98d4c965e7e6e17df35894ff473c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e953d22fa069e4233c2769a80030432_JaffaCakes118
Size

41KB
Sample

240709-b8hvrasemf
MD5

2e953d22fa069e4233c2769a80030432
SHA1

604de3e7c5c31156b9694b41759337f5720b5d34
SHA256

34fdbb13722e0a6245f547d05c4858bfcc6b98d4c965e7e6e17df35894ff473c
SHA512

abd5702607ebc4788cea6b93405eec0d2b17dd5a925f53dfb8bdabf32b4e360485ab810ba4f6a8911347ffb609ed89e170b5637a4a2217fdf67698c3a5848ee6
SSDEEP

768:t9Z1p/ija+1ImN6Kba5uPfFNtDo7YLu5lEPCbbdcxeDuNRtCPFzP:t9ZqDba5sLCfPbb2xzOP

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2e953d22fa069e4233c2769a80030432_JaffaCakes118
- Size
  
  41KB
- MD5
  
  2e953d22fa069e4233c2769a80030432
- SHA1
  
  604de3e7c5c31156b9694b41759337f5720b5d34
- SHA256
  
  34fdbb13722e0a6245f547d05c4858bfcc6b98d4c965e7e6e17df35894ff473c
- SHA512
  
  abd5702607ebc4788cea6b93405eec0d2b17dd5a925f53dfb8bdabf32b4e360485ab810ba4f6a8911347ffb609ed89e170b5637a4a2217fdf67698c3a5848ee6
- SSDEEP
  
  768:t9Z1p/ija+1ImN6Kba5uPfFNtDo7YLu5lEPCbbdcxeDuNRtCPFzP:t9ZqDba5sLCfPbb2xzOP
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2