ca6ae0cef3c43597c0c9b426774c5f9d9a01f86e3927717bc794e76612bfab37 | Triage

Sharing

General

Target

3caf416f2734190c19b523fc4cb47eee_JaffaCakes118
Size

131KB
Sample

240712-kk2gmawcrn
MD5

3caf416f2734190c19b523fc4cb47eee
SHA1

fb50082e6e6ec99858dff4d67bb77125f4cce745
SHA256

ca6ae0cef3c43597c0c9b426774c5f9d9a01f86e3927717bc794e76612bfab37
SHA512

4b8661085ddc4289040afa27c13452d6c12752b6b44d34cef9be8c8267253561c8573e0118784b992977f45dd4f9700b9e64b3eeaa2af875e6816adf5c0d1c95
SSDEEP

3072:0NMFJ9FFyeUheP67+nCcAa2aRICB6BEVErxmiYw7WQUOpbhM6OZ:0uFiejP6+C2136BEexmxwpUcY

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3caf416f2734190c19b523fc4cb47eee_JaffaCakes118
- Size
  
  131KB
- MD5
  
  3caf416f2734190c19b523fc4cb47eee
- SHA1
  
  fb50082e6e6ec99858dff4d67bb77125f4cce745
- SHA256
  
  ca6ae0cef3c43597c0c9b426774c5f9d9a01f86e3927717bc794e76612bfab37
- SHA512
  
  4b8661085ddc4289040afa27c13452d6c12752b6b44d34cef9be8c8267253561c8573e0118784b992977f45dd4f9700b9e64b3eeaa2af875e6816adf5c0d1c95
- SSDEEP
  
  3072:0NMFJ9FFyeUheP67+nCcAa2aRICB6BEVErxmiYw7WQUOpbhM6OZ:0uFiejP6+C2136BEexmxwpUcY
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2