922aa3d52e3c62b63238891aa8814f929cb5aeebc9633416d1826db2ee7dfae9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3cffe52e42c185ed026cf6ce8f8969e_JaffaCakes118
Size

64KB
Sample

240817-x3rflavfkj
MD5

a3cffe52e42c185ed026cf6ce8f8969e
SHA1

c086cfc42f290f7c9a7fcd44334be29bf72e9295
SHA256

922aa3d52e3c62b63238891aa8814f929cb5aeebc9633416d1826db2ee7dfae9
SHA512

4b10da6f21a841d87bc6d395390ba8ccbebe75d27ed2dc9463d61a53da54b9b84ff673346cedc55ebcd0e0605f64b4f8f7f492f86178246ef67666de8651fbeb
SSDEEP

768:kafQmHy4c93vGSxt7j7g1E9wWEWJJd3G5U3s4xQMm37L3EVgfRO+ozTlt:amS9T5ftwWTGm3O33/IJ1

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a3cffe52e42c185ed026cf6ce8f8969e_JaffaCakes118
- Size
  
  64KB
- MD5
  
  a3cffe52e42c185ed026cf6ce8f8969e
- SHA1
  
  c086cfc42f290f7c9a7fcd44334be29bf72e9295
- SHA256
  
  922aa3d52e3c62b63238891aa8814f929cb5aeebc9633416d1826db2ee7dfae9
- SHA512
  
  4b10da6f21a841d87bc6d395390ba8ccbebe75d27ed2dc9463d61a53da54b9b84ff673346cedc55ebcd0e0605f64b4f8f7f492f86178246ef67666de8651fbeb
- SSDEEP
  
  768:kafQmHy4c93vGSxt7j7g1E9wWEWJJd3G5U3s4xQMm37L3EVgfRO+ozTlt:amS9T5ftwWTGm3O33/IJ1
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation