928ddb9c9ff21bb503f4c9ea630fd11b235ca74d34219fc74531d62f20868c12 | Triage

Sharing

General

Target

85b6409e2d69f26730e436aaa0af1f3f_JaffaCakes118
Size

36KB
Sample

240810-mgke2svgpq
MD5

85b6409e2d69f26730e436aaa0af1f3f
SHA1

42282e388283c65733f52c78e81ca3fc11ababe3
SHA256

928ddb9c9ff21bb503f4c9ea630fd11b235ca74d34219fc74531d62f20868c12
SHA512

4206df12ca1268c12f9ba854f187258a0a951dd7ea86a574d167501d245f489fc0565e906bfee3ac285440a0c7af33451952c309a025bda9c23183b276510317
SSDEEP

384:jhGsriCS7iW6MR3OBv6dL2GCrnqencV4pPzznZuPfn:Sc+NNL2nrnqen44lUf

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  85b6409e2d69f26730e436aaa0af1f3f_JaffaCakes118
- Size
  
  36KB
- MD5
  
  85b6409e2d69f26730e436aaa0af1f3f
- SHA1
  
  42282e388283c65733f52c78e81ca3fc11ababe3
- SHA256
  
  928ddb9c9ff21bb503f4c9ea630fd11b235ca74d34219fc74531d62f20868c12
- SHA512
  
  4206df12ca1268c12f9ba854f187258a0a951dd7ea86a574d167501d245f489fc0565e906bfee3ac285440a0c7af33451952c309a025bda9c23183b276510317
- SSDEEP
  
  384:jhGsriCS7iW6MR3OBv6dL2GCrnqencV4pPzznZuPfn:Sc+NNL2nrnqen44lUf
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence