61bc5d9518b650fbfdce614f48ebcab86b2531f132a086a14ab8225862447ab2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a62b16940d9af2697b318bf27558dec_JaffaCakes118
Size

68KB
Sample

240811-ptsnaszclr
MD5

8a62b16940d9af2697b318bf27558dec
SHA1

b40badedd48ec4eda45f97d33bb60f565130fa66
SHA256

61bc5d9518b650fbfdce614f48ebcab86b2531f132a086a14ab8225862447ab2
SHA512

3cbb1545a435203f153331c93c318915da667a28b6b78fda45da1100df89e23aa40e1068472df3611fa266e44ab7e1629b8da41d83e211dda6c5d0d86e83a2b5
SSDEEP

768:XMoJ0OZ7FV732L2vC+E90i4q9p+SimMhhQKVizBvcenHNzHX7Z6I:LP7FV7Ctai4BSimMhGRNfHpoI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  8a62b16940d9af2697b318bf27558dec_JaffaCakes118
- Size
  
  68KB
- MD5
  
  8a62b16940d9af2697b318bf27558dec
- SHA1
  
  b40badedd48ec4eda45f97d33bb60f565130fa66
- SHA256
  
  61bc5d9518b650fbfdce614f48ebcab86b2531f132a086a14ab8225862447ab2
- SHA512
  
  3cbb1545a435203f153331c93c318915da667a28b6b78fda45da1100df89e23aa40e1068472df3611fa266e44ab7e1629b8da41d83e211dda6c5d0d86e83a2b5
- SSDEEP
  
  768:XMoJ0OZ7FV732L2vC+E90i4q9p+SimMhhQKVizBvcenHNzHX7Z6I:LP7FV7Ctai4BSimMhGRNfHpoI
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence