13ba2aed9d64882efffd186caf072a12efa44144065d1f8cbb5fa22cbe6bd0ab | Triage

Sharing

General

Target

4427b7c7a566be5571c0456df2863204_JaffaCakes118
Size

121KB
Sample

240714-d9k3lsvgjn
MD5

4427b7c7a566be5571c0456df2863204
SHA1

dfe896215351f52b5b2954a0658c04f687ff8317
SHA256

13ba2aed9d64882efffd186caf072a12efa44144065d1f8cbb5fa22cbe6bd0ab
SHA512

6bf5ae143e8fa84a1801c443215778e4c63f689b951ab23db28d0ce0eb08205987fb6f109dabec7047f40fa0d7629df79b2db57db7b3cf02c09e9218865424ac
SSDEEP

3072:hhwGr86LUEkIT2Ioi1HupRCZ8Ij26QTu7wsRQ/ustd6gHIkRO6T5ukv:5uZIfbh7hZ0X

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4427b7c7a566be5571c0456df2863204_JaffaCakes118
- Size
  
  121KB
- MD5
  
  4427b7c7a566be5571c0456df2863204
- SHA1
  
  dfe896215351f52b5b2954a0658c04f687ff8317
- SHA256
  
  13ba2aed9d64882efffd186caf072a12efa44144065d1f8cbb5fa22cbe6bd0ab
- SHA512
  
  6bf5ae143e8fa84a1801c443215778e4c63f689b951ab23db28d0ce0eb08205987fb6f109dabec7047f40fa0d7629df79b2db57db7b3cf02c09e9218865424ac
- SSDEEP
  
  3072:hhwGr86LUEkIT2Ioi1HupRCZ8Ij26QTu7wsRQ/ustd6gHIkRO6T5ukv:5uZIfbh7hZ0X
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2