600f0c7f3065a243989f6ce276bc0599e65163b88cc1ec3ae1fd64cf7f713b9d | Triage

Sharing

General

Target

489969040de8996c10112600b5af0102_JaffaCakes118
Size

624KB
Sample

240715-g7jnjsvgkd
MD5

489969040de8996c10112600b5af0102
SHA1

b84cb222f0f228f735bda64c222b6b1f4ad20a6a
SHA256

600f0c7f3065a243989f6ce276bc0599e65163b88cc1ec3ae1fd64cf7f713b9d
SHA512

df9526d91b4df620440377a2249f364f2409766266884b629530de2c0dab62e1b1c2ef27f4565b00c4c23629cb3e50abc44b643f34e34754376f80e955824c75
SSDEEP

6144:q8WuvadI/lk4MGw2uTniKCcpOHykxJyjGvj3T:qJuOI9TpnGiK5OHtxd

Score

8^/10

evasion execution persistence

Malware Config

Targets

- Target
  
  489969040de8996c10112600b5af0102_JaffaCakes118
- Size
  
  624KB
- MD5
  
  489969040de8996c10112600b5af0102
- SHA1
  
  b84cb222f0f228f735bda64c222b6b1f4ad20a6a
- SHA256
  
  600f0c7f3065a243989f6ce276bc0599e65163b88cc1ec3ae1fd64cf7f713b9d
- SHA512
  
  df9526d91b4df620440377a2249f364f2409766266884b629530de2c0dab62e1b1c2ef27f4565b00c4c23629cb3e50abc44b643f34e34754376f80e955824c75
- SSDEEP
  
  6144:q8WuvadI/lk4MGw2uTniKCcpOHykxJyjGvj3T:qJuOI9TpnGiK5OHtxd
Score

8^/10

evasion execution persistence
- Stops running service(s)
  evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Time Providers

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Time Providers

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionpersistence

behavioral2

evasionexecutionpersistence