8f45c4aa79efb95c4c9153e7f44b513f91ee92f9836de0a2f57da459636ee9ea | Triage

Sharing

General

Target

68fbd055d9b3149296fecbe8f21739ea_JaffaCakes118
Size

88KB
Sample

240723-z8e1vssdnb
MD5

68fbd055d9b3149296fecbe8f21739ea
SHA1

ec600b4ab7ed4f22397ef5f305c795e7735f2fd3
SHA256

8f45c4aa79efb95c4c9153e7f44b513f91ee92f9836de0a2f57da459636ee9ea
SHA512

c0dd6206d537dfe6100aa18ad90539e5f1e53ab6a223a13cc59f2d34275ca6fce373a58ecc2efb5da4df9c86d6a7627377c2a1355da73e11afce14328bf5c7fc
SSDEEP

1536:fdR2PcmZAJcduYhfwXCwOr9Bl/mC/VVjAMIG82GsbBdY1HTcYJys1B5:1R2PcmZuKfGCwOr9z/mMVyd4GsnCVysF

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  68fbd055d9b3149296fecbe8f21739ea_JaffaCakes118
- Size
  
  88KB
- MD5
  
  68fbd055d9b3149296fecbe8f21739ea
- SHA1
  
  ec600b4ab7ed4f22397ef5f305c795e7735f2fd3
- SHA256
  
  8f45c4aa79efb95c4c9153e7f44b513f91ee92f9836de0a2f57da459636ee9ea
- SHA512
  
  c0dd6206d537dfe6100aa18ad90539e5f1e53ab6a223a13cc59f2d34275ca6fce373a58ecc2efb5da4df9c86d6a7627377c2a1355da73e11afce14328bf5c7fc
- SSDEEP
  
  1536:fdR2PcmZAJcduYhfwXCwOr9Bl/mC/VVjAMIG82GsbBdY1HTcYJys1B5:1R2PcmZuKfGCwOr9z/mMVyd4GsnCVysF
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence