3dee12105d715e0ec253963dadb3d2aac305339251e9cf657a368aab0da7fefe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

888722b4cfdc0dd5bad101de637267ea_JaffaCakes118
Size

44KB
Sample

240811-b9k2hazann
MD5

888722b4cfdc0dd5bad101de637267ea
SHA1

620036090058208196dfdef0aa225c857448b53f
SHA256

3dee12105d715e0ec253963dadb3d2aac305339251e9cf657a368aab0da7fefe
SHA512

6a2f92bb28517ec0208244d4a038859f786ca550fd2a1b4acb38b4b6cafddfe48894b38d3bd3d4e36401f72e33ca1cd488027c47005d800bf3d38d53b209015d
SSDEEP

768:9zPeMxFdGZxXeMUOfEb1qeXq/M07W+TjLAEuEHzyn0mwng3iBSftu2UHFDlQypb8:97dFoewK1fa/Mi7TjU2Hzy+nEiBSftuc

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  888722b4cfdc0dd5bad101de637267ea_JaffaCakes118
- Size
  
  44KB
- MD5
  
  888722b4cfdc0dd5bad101de637267ea
- SHA1
  
  620036090058208196dfdef0aa225c857448b53f
- SHA256
  
  3dee12105d715e0ec253963dadb3d2aac305339251e9cf657a368aab0da7fefe
- SHA512
  
  6a2f92bb28517ec0208244d4a038859f786ca550fd2a1b4acb38b4b6cafddfe48894b38d3bd3d4e36401f72e33ca1cd488027c47005d800bf3d38d53b209015d
- SSDEEP
  
  768:9zPeMxFdGZxXeMUOfEb1qeXq/M07W+TjLAEuEHzyn0mwng3iBSftu2UHFDlQypb8:97dFoewK1fa/Mi7TjU2Hzy+nEiBSftuc
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence