cdde7292f7fad819a8636f14caf568b228e088d36061eff673535839919a3d6f | Triage

Sharing

General

Target

a26d7a378e6548cfe8f2d084e6e9a7e6_JaffaCakes118
Size

26KB
Sample

240817-n239bsxbpj
MD5

a26d7a378e6548cfe8f2d084e6e9a7e6
SHA1

8fa839421fe275600c2d192c8ba7b5a4738ae3c7
SHA256

cdde7292f7fad819a8636f14caf568b228e088d36061eff673535839919a3d6f
SHA512

d4a055010afdcafd6ba6d3938033f282dc9742ddf4c20971df8a5f63cafa85a9d6183aac257d419f856d3d0824417cabb58acec6e768b021be5d90044b916dfb
SSDEEP

768:HIkUXnviEZK3Vqudn/yccc0uGB6BkMtbLJ:FUXnqVqOn/uDBg1

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  a26d7a378e6548cfe8f2d084e6e9a7e6_JaffaCakes118
- Size
  
  26KB
- MD5
  
  a26d7a378e6548cfe8f2d084e6e9a7e6
- SHA1
  
  8fa839421fe275600c2d192c8ba7b5a4738ae3c7
- SHA256
  
  cdde7292f7fad819a8636f14caf568b228e088d36061eff673535839919a3d6f
- SHA512
  
  d4a055010afdcafd6ba6d3938033f282dc9742ddf4c20971df8a5f63cafa85a9d6183aac257d419f856d3d0824417cabb58acec6e768b021be5d90044b916dfb
- SSDEEP
  
  768:HIkUXnviEZK3Vqudn/yccc0uGB6BkMtbLJ:FUXnqVqOn/uDBg1
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2