3d6e6b6a814659140dbdc9a57576667e385e0ad445a0416150807db13fb1b449 | Triage

Sharing

General

Target

7105636188e25a769aeea11a6547fe74_JaffaCakes118
Size

97KB
Sample

240725-yr6ltavdlh
MD5

7105636188e25a769aeea11a6547fe74
SHA1

d4fac6aaf251a92611abebf5912a058bcfcf7713
SHA256

3d6e6b6a814659140dbdc9a57576667e385e0ad445a0416150807db13fb1b449
SHA512

37b047c83e36bc2af0c262f469c0cc12f1850d0245367896a8889acc4c07967d9ca6134de1158a57aa9e8cbd76bb41c9c4d63fcf18191c1b2040369b5eb598b8
SSDEEP

1536:pTWhwiiehaL5o7F4iKEFXvx9oFqWGVYL4CpNt1hV:pEvrwL5oJ/XUBt

Score

7^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  7105636188e25a769aeea11a6547fe74_JaffaCakes118
- Size
  
  97KB
- MD5
  
  7105636188e25a769aeea11a6547fe74
- SHA1
  
  d4fac6aaf251a92611abebf5912a058bcfcf7713
- SHA256
  
  3d6e6b6a814659140dbdc9a57576667e385e0ad445a0416150807db13fb1b449
- SHA512
  
  37b047c83e36bc2af0c262f469c0cc12f1850d0245367896a8889acc4c07967d9ca6134de1158a57aa9e8cbd76bb41c9c4d63fcf18191c1b2040369b5eb598b8
- SSDEEP
  
  1536:pTWhwiiehaL5o7F4iKEFXvx9oFqWGVYL4CpNt1hV:pEvrwL5oJ/XUBt
Score

7^/10

defense_evasion discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Modifies system executable filetype association
  persistence
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence