007769976ce5838a35fde47d179b50807ef1bf65cb3da85790644493204b0ced | Triage

Sharing

General

Target

3ee8a1192fdaae0b9f7e19babe5f05d8_JaffaCakes118
Size

4.6MB
Sample

240712-z38e8asgmb
MD5

3ee8a1192fdaae0b9f7e19babe5f05d8
SHA1

8b9ecac004dafe21ba6abc40fa021bcb9f254c75
SHA256

007769976ce5838a35fde47d179b50807ef1bf65cb3da85790644493204b0ced
SHA512

51e1c0c6af1e32c14ee0bdae8b8ded95558b98ff2f98fc808ad4d8c30803276698d03c2b9d7dd70875b194a39c47f61491940d5dd60e2edfc4feddbd1c40fdf9
SSDEEP

98304:WpuQ+1hySyBWbCSnH5aQBSQb29S5xKFdYtXVR5CUDYST:WpmCBWbBnHsQBSQb2gaSVSUUS

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3ee8a1192fdaae0b9f7e19babe5f05d8_JaffaCakes118
- Size
  
  4.6MB
- MD5
  
  3ee8a1192fdaae0b9f7e19babe5f05d8
- SHA1
  
  8b9ecac004dafe21ba6abc40fa021bcb9f254c75
- SHA256
  
  007769976ce5838a35fde47d179b50807ef1bf65cb3da85790644493204b0ced
- SHA512
  
  51e1c0c6af1e32c14ee0bdae8b8ded95558b98ff2f98fc808ad4d8c30803276698d03c2b9d7dd70875b194a39c47f61491940d5dd60e2edfc4feddbd1c40fdf9
- SSDEEP
  
  98304:WpuQ+1hySyBWbCSnH5aQBSQb29S5xKFdYtXVR5CUDYST:WpmCBWbBnHsQBSQb2gaSVSUUS
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2