ae967af74a3f23be8db8b24143231e4534d683522133d6d5e8f7c02ef808a2f1 | Triage

Sharing

General

Target

9fe5812c2ee169e13316df40bbf4ba11_JaffaCakes118
Size

388KB
Sample

240816-zpnhwszenq
MD5

9fe5812c2ee169e13316df40bbf4ba11
SHA1

0c09b18437830a1729060e1850205582ad60d742
SHA256

ae967af74a3f23be8db8b24143231e4534d683522133d6d5e8f7c02ef808a2f1
SHA512

2f18689e92103cba8386568464397be7405d2e88126307ceb4292473c9a09e424a92bfc909cd0c580ecc6e5f4344302da7d0a25f5be807a71f612262f9137dc4
SSDEEP

6144:ZdbELf/MR/cWdi5pV/JNWOVhMUVbELf/MR/J:PdOpNX1h

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  9fe5812c2ee169e13316df40bbf4ba11_JaffaCakes118
- Size
  
  388KB
- MD5
  
  9fe5812c2ee169e13316df40bbf4ba11
- SHA1
  
  0c09b18437830a1729060e1850205582ad60d742
- SHA256
  
  ae967af74a3f23be8db8b24143231e4534d683522133d6d5e8f7c02ef808a2f1
- SHA512
  
  2f18689e92103cba8386568464397be7405d2e88126307ceb4292473c9a09e424a92bfc909cd0c580ecc6e5f4344302da7d0a25f5be807a71f612262f9137dc4
- SSDEEP
  
  6144:ZdbELf/MR/cWdi5pV/JNWOVhMUVbELf/MR/J:PdOpNX1h
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence