8c6865afb5235d0d3b3decff70216a06e9d3b1028fcf38e5984cb76c1b0caa7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6514cdf14bfe0a45c5348e5f605af9f_JaffaCakes118
Size

996KB
Sample

240818-lwr8rs1cnm
MD5

a6514cdf14bfe0a45c5348e5f605af9f
SHA1

f62fde5330edf97c245f9075cb144cedbf0950ba
SHA256

8c6865afb5235d0d3b3decff70216a06e9d3b1028fcf38e5984cb76c1b0caa7e
SHA512

703d2e122990ec1b533c51db4f20f6547d980b980c486d9adf6ab8765a8b6c6f3d96524e082c2a42a94c070d5d597339622d25baa27420f335e9549c33e23043
SSDEEP

24576:bAhu8R3PZxx7DUFdqgpuPSO/ymEDPqzofxwG+b:8huWR7EdpuHydZpwZ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6514cdf14bfe0a45c5348e5f605af9f_JaffaCakes118
- Size
  
  996KB
- MD5
  
  a6514cdf14bfe0a45c5348e5f605af9f
- SHA1
  
  f62fde5330edf97c245f9075cb144cedbf0950ba
- SHA256
  
  8c6865afb5235d0d3b3decff70216a06e9d3b1028fcf38e5984cb76c1b0caa7e
- SHA512
  
  703d2e122990ec1b533c51db4f20f6547d980b980c486d9adf6ab8765a8b6c6f3d96524e082c2a42a94c070d5d597339622d25baa27420f335e9549c33e23043
- SSDEEP
  
  24576:bAhu8R3PZxx7DUFdqgpuPSO/ymEDPqzofxwG+b:8huWR7EdpuHydZpwZ
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence