f05c2f1875bbd7279cc756f9092908b7ffaa24876ed1faa6b13cd05ebba6a3ca | Triage

Sharing

General

Target

842b94cc3346df05e6094cf3040f03e4_JaffaCakes118
Size

36KB
Sample

240810-aycqbaxcpp
MD5

842b94cc3346df05e6094cf3040f03e4
SHA1

254d479142fa6c0f2c183f3077646ba855dc97d1
SHA256

f05c2f1875bbd7279cc756f9092908b7ffaa24876ed1faa6b13cd05ebba6a3ca
SHA512

5b4098c36d7d1a237b5a98de3cf62fb1a2c78ba06d31c6324f56978e7a54178e2d43ed6629f67714d7657c24a0992c23796b8c6e65ec4c9385d4a9e948ee4519
SSDEEP

768:CfZ2YidJN5kXcyXrCD1tDMByGqnxGm3+IdW:CedEcyXrC/GsnsGdW

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  842b94cc3346df05e6094cf3040f03e4_JaffaCakes118
- Size
  
  36KB
- MD5
  
  842b94cc3346df05e6094cf3040f03e4
- SHA1
  
  254d479142fa6c0f2c183f3077646ba855dc97d1
- SHA256
  
  f05c2f1875bbd7279cc756f9092908b7ffaa24876ed1faa6b13cd05ebba6a3ca
- SHA512
  
  5b4098c36d7d1a237b5a98de3cf62fb1a2c78ba06d31c6324f56978e7a54178e2d43ed6629f67714d7657c24a0992c23796b8c6e65ec4c9385d4a9e948ee4519
- SSDEEP
  
  768:CfZ2YidJN5kXcyXrCD1tDMByGqnxGm3+IdW:CedEcyXrC/GsnsGdW
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation