480d17453aafbbe1ae6a25d31826279c56d2b84885d0ea3a6c0ad678a0951f24 | Triage

Sharing

General

Target

7217708b1d6faff76df776cba121d059_JaffaCakes118
Size

566KB
Sample

240726-b1es5a1ejg
MD5

7217708b1d6faff76df776cba121d059
SHA1

d6927eff5788d9f466f62ae4eb1520f565700b83
SHA256

480d17453aafbbe1ae6a25d31826279c56d2b84885d0ea3a6c0ad678a0951f24
SHA512

65c5631b0da2b7c487191c4e8dea988e7b3ab9a55078ced251108a6405af0ada4925687cf2e92f448c1a5a42b2e9227b736739e698914922d956ce539c6e75ae
SSDEEP

6144:L4V7nL2adqmpbSwQYpdE9nOYrGFigA+kgNVYocVuDw:L4V7nL2a9pR109n7rOiUNVNuuDw

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  7217708b1d6faff76df776cba121d059_JaffaCakes118
- Size
  
  566KB
- MD5
  
  7217708b1d6faff76df776cba121d059
- SHA1
  
  d6927eff5788d9f466f62ae4eb1520f565700b83
- SHA256
  
  480d17453aafbbe1ae6a25d31826279c56d2b84885d0ea3a6c0ad678a0951f24
- SHA512
  
  65c5631b0da2b7c487191c4e8dea988e7b3ab9a55078ced251108a6405af0ada4925687cf2e92f448c1a5a42b2e9227b736739e698914922d956ce539c6e75ae
- SSDEEP
  
  6144:L4V7nL2adqmpbSwQYpdE9nOYrGFigA+kgNVYocVuDw:L4V7nL2a9pR109n7rOiUNVNuuDw
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence