0348416abb318d216ebd34fe387182fba5ad7b0f0490cc588a1c48056a0f32a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae720978a65a3cb78b37c2639a6619c4_JaffaCakes118
Size

221KB
Sample

240820-jyv2bsvfkj
MD5

ae720978a65a3cb78b37c2639a6619c4
SHA1

e60995c791df0e0111f52be1fed7e8b5bf201e2b
SHA256

0348416abb318d216ebd34fe387182fba5ad7b0f0490cc588a1c48056a0f32a0
SHA512

f084a45918c27eba3394870f05025064bb6e04cba570c37f25f04fcca941d77babf5b6e0979b97104392702e5a7bccb15ce59a69d7ac98f4cce6691444117c9e
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8HkgnYHfQlA5:o68i3odBiTl2+TCU/ck8KfQl2

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ae720978a65a3cb78b37c2639a6619c4_JaffaCakes118
- Size
  
  221KB
- MD5
  
  ae720978a65a3cb78b37c2639a6619c4
- SHA1
  
  e60995c791df0e0111f52be1fed7e8b5bf201e2b
- SHA256
  
  0348416abb318d216ebd34fe387182fba5ad7b0f0490cc588a1c48056a0f32a0
- SHA512
  
  f084a45918c27eba3394870f05025064bb6e04cba570c37f25f04fcca941d77babf5b6e0979b97104392702e5a7bccb15ce59a69d7ac98f4cce6691444117c9e
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8HkgnYHfQlA5:o68i3odBiTl2+TCU/ck8KfQl2
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence