f3f6cb75c9397e79039850ad5c215d9935eb8982d5c79e58f127e8d7fcabe51b | Triage

Sharing

General

Target

77301810f76f47d48379f4b0ded1185a_JaffaCakes118
Size

292KB
Sample

240727-grsaratdpb
MD5

77301810f76f47d48379f4b0ded1185a
SHA1

868f61f3654f388b4030adbaebfdac34f43a996e
SHA256

f3f6cb75c9397e79039850ad5c215d9935eb8982d5c79e58f127e8d7fcabe51b
SHA512

2deb349cdee160bad8b3cd2245e87fb294db8e02737021eece84529922f0a3828eb007f85f90996160c10b7f149009118652caab0b0b4a8effa77e1fca1bf37d
SSDEEP

6144:DLnAb/M2A2hi6wSuzKzFptiBNKPAxRLK2xOD:HnAb/A29IKzJANKP+MH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  77301810f76f47d48379f4b0ded1185a_JaffaCakes118
- Size
  
  292KB
- MD5
  
  77301810f76f47d48379f4b0ded1185a
- SHA1
  
  868f61f3654f388b4030adbaebfdac34f43a996e
- SHA256
  
  f3f6cb75c9397e79039850ad5c215d9935eb8982d5c79e58f127e8d7fcabe51b
- SHA512
  
  2deb349cdee160bad8b3cd2245e87fb294db8e02737021eece84529922f0a3828eb007f85f90996160c10b7f149009118652caab0b0b4a8effa77e1fca1bf37d
- SSDEEP
  
  6144:DLnAb/M2A2hi6wSuzKzFptiBNKPAxRLK2xOD:HnAb/A29IKzJANKP+MH
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence