ca62468ca46de3d3fa7a501ae00bc70aeb682a4098652934a1a450674eac0001 | Triage

Sharing

General

Target

75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118
Size

40KB
Sample

240726-z9r2tawapn
MD5

75c985a2deee1d98b2e26a07fe35ea1b
SHA1

ce2d092ca8fb1f44802d1860a0145ea984678af2
SHA256

ca62468ca46de3d3fa7a501ae00bc70aeb682a4098652934a1a450674eac0001
SHA512

56030053cb07db3b4dc08951f31a54a1927e6445c6b3914156b88b000730c808070dc012719134112e0b31bf0eb2b365eabf486043d4a806ec51b2aab83703a1
SSDEEP

768:/mVG2CkCYL8gJMuaaxxpKBKYxvbB6ogA2LsNNSsIcp:/mVG2CkCYL8gauxLpgxvso7Dbp

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  75c985a2deee1d98b2e26a07fe35ea1b_JaffaCakes118
- Size
  
  40KB
- MD5
  
  75c985a2deee1d98b2e26a07fe35ea1b
- SHA1
  
  ce2d092ca8fb1f44802d1860a0145ea984678af2
- SHA256
  
  ca62468ca46de3d3fa7a501ae00bc70aeb682a4098652934a1a450674eac0001
- SHA512
  
  56030053cb07db3b4dc08951f31a54a1927e6445c6b3914156b88b000730c808070dc012719134112e0b31bf0eb2b365eabf486043d4a806ec51b2aab83703a1
- SSDEEP
  
  768:/mVG2CkCYL8gJMuaaxxpKBKYxvbB6ogA2LsNNSsIcp:/mVG2CkCYL8gauxLpgxvso7Dbp
Score

7^/10

discovery defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscovery