b1d1256ac76f5442c1a5a4948522c73c879fd7b57c1303275fd5fd5b2295b575 | Triage

Sharing

General

Target

837fa46ff00e245a0c44bc3cbed6d9d2_JaffaCakes118
Size

79KB
Sample

240809-zj71caybnr
MD5

837fa46ff00e245a0c44bc3cbed6d9d2
SHA1

400c43992d8117a366e324c4679c0d9c811cc909
SHA256

b1d1256ac76f5442c1a5a4948522c73c879fd7b57c1303275fd5fd5b2295b575
SHA512

2d0227bc26baf6cc59f2ce9a9efeb5722fe2c5c28ab257289959add49ad22266beed35c3180182495a53f41da7feee88581f5533f23b8f9750276595fec980ae
SSDEEP

1536:VdzCU+0GptrrZk4Rn4TzTlqW7qx8OJabmGDf/EIpY00EdsVhz02p:VlC2gtrrRnGFqbxaHDf/Ex0Bs7

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  837fa46ff00e245a0c44bc3cbed6d9d2_JaffaCakes118
- Size
  
  79KB
- MD5
  
  837fa46ff00e245a0c44bc3cbed6d9d2
- SHA1
  
  400c43992d8117a366e324c4679c0d9c811cc909
- SHA256
  
  b1d1256ac76f5442c1a5a4948522c73c879fd7b57c1303275fd5fd5b2295b575
- SHA512
  
  2d0227bc26baf6cc59f2ce9a9efeb5722fe2c5c28ab257289959add49ad22266beed35c3180182495a53f41da7feee88581f5533f23b8f9750276595fec980ae
- SSDEEP
  
  1536:VdzCU+0GptrrZk4Rn4TzTlqW7qx8OJabmGDf/EIpY00EdsVhz02p:VlC2gtrrRnGFqbxaHDf/Ex0Bs7
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence