82453a7ede3c73cb0e5724a2a919c50842be6d1076a28aacad4739f738a09a0b | Triage

Sharing

General

Target

39efd232bcf49a38db557af3118163b1_JaffaCakes118
Size

2.7MB
Sample

240711-t7bddsvemm
MD5

39efd232bcf49a38db557af3118163b1
SHA1

e45e9029788c939208e2a8dc5f3ba1aa1845289d
SHA256

82453a7ede3c73cb0e5724a2a919c50842be6d1076a28aacad4739f738a09a0b
SHA512

6e0933fbaa51537aaee47aa30ad36c034da6f3342a5a5fef5ab53198ad857c35dba0ec0d5f693a45fddbef3ae7abff8006ed2f17fdb1d55baced45f128bd895d
SSDEEP

49152:eE/iMAZs7s3cRS0w26cHMaMrg1fT0KyKcnvzWDR6FIsEqUvY:rRrs3ISL26cH6rq7TcnqDUFI7qUY

Score

7^/10

defense_evasion privilege_escalation

Malware Config

Targets

- Target
  
  39efd232bcf49a38db557af3118163b1_JaffaCakes118
- Size
  
  2.7MB
- MD5
  
  39efd232bcf49a38db557af3118163b1
- SHA1
  
  e45e9029788c939208e2a8dc5f3ba1aa1845289d
- SHA256
  
  82453a7ede3c73cb0e5724a2a919c50842be6d1076a28aacad4739f738a09a0b
- SHA512
  
  6e0933fbaa51537aaee47aa30ad36c034da6f3342a5a5fef5ab53198ad857c35dba0ec0d5f693a45fddbef3ae7abff8006ed2f17fdb1d55baced45f128bd895d
- SSDEEP
  
  49152:eE/iMAZs7s3cRS0w26cHMaMrg1fT0KyKcnvzWDR6FIsEqUvY:rRrs3ISL26cH6rq7TcnqDUFI7qUY
Score

7^/10

defense_evasion privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionprivilege_escalation

behavioral2

defense_evasionprivilege_escalation