ded688dcdccf282f71b93364bb821e114db285df62a30caaff3716fdda8e4dbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aee4e659d4fe42e676e9b757ba5ba261_JaffaCakes118
Size

167KB
Sample

240820-mn82zs1djj
MD5

aee4e659d4fe42e676e9b757ba5ba261
SHA1

16bdcd9e8066cc96d8e23e386b75cc9edb545d23
SHA256

ded688dcdccf282f71b93364bb821e114db285df62a30caaff3716fdda8e4dbc
SHA512

0b18a664b81ebf1f76c2c9ab03e6a5517ba01eb1d0bdbe445742996874605b90316faceae703ec9855a658725b45fbb6f031542550836c05993eee4695efc239
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8u:o68i3odBiTl2+TCU//

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  aee4e659d4fe42e676e9b757ba5ba261_JaffaCakes118
- Size
  
  167KB
- MD5
  
  aee4e659d4fe42e676e9b757ba5ba261
- SHA1
  
  16bdcd9e8066cc96d8e23e386b75cc9edb545d23
- SHA256
  
  ded688dcdccf282f71b93364bb821e114db285df62a30caaff3716fdda8e4dbc
- SHA512
  
  0b18a664b81ebf1f76c2c9ab03e6a5517ba01eb1d0bdbe445742996874605b90316faceae703ec9855a658725b45fbb6f031542550836c05993eee4695efc239
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8u:o68i3odBiTl2+TCU//
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence