4b05ce1e4ef18ab3bc00027ae248873deae51c58191edddb2440b434e4a3bc17 | Triage

Sharing

General

Target

3d5661b29467f8eb4bf83f6ba7c1e8ce_JaffaCakes118
Size

39KB
Sample

240712-pe36gsvfnd
MD5

3d5661b29467f8eb4bf83f6ba7c1e8ce
SHA1

d6eca5824ef7671cb1bcb9e33fd445da9cf1622c
SHA256

4b05ce1e4ef18ab3bc00027ae248873deae51c58191edddb2440b434e4a3bc17
SHA512

9b7e8cff2816fca59ec8b34ff68557f95b165e032443f44f6933d9d950c3df7897896771475adcfa5ffb66e310ca8537348f56bea8052a075fa12302a070167b
SSDEEP

768:eNnXyiS9KHnxaVL322sRutEftKWHyNxQzTjiD72U97/zCFF7bWx:GyGHnxap23uoE8yXKjM2s/zAF

Score

7^/10

evasion execution persistence trojan

Malware Config

Targets

- Target
  
  3d5661b29467f8eb4bf83f6ba7c1e8ce_JaffaCakes118
- Size
  
  39KB
- MD5
  
  3d5661b29467f8eb4bf83f6ba7c1e8ce
- SHA1
  
  d6eca5824ef7671cb1bcb9e33fd445da9cf1622c
- SHA256
  
  4b05ce1e4ef18ab3bc00027ae248873deae51c58191edddb2440b434e4a3bc17
- SHA512
  
  9b7e8cff2816fca59ec8b34ff68557f95b165e032443f44f6933d9d950c3df7897896771475adcfa5ffb66e310ca8537348f56bea8052a075fa12302a070167b
- SSDEEP
  
  768:eNnXyiS9KHnxaVL322sRutEftKWHyNxQzTjiD72U97/zCFF7bWx:GyGHnxap23uoE8yXKjM2s/zAF
Score

7^/10

evasion execution persistence trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionexecutionpersistencetrojan

behavioral2

evasionexecutionpersistencetrojan