2c04ee4cb87e9e0997b7572c12d34281375947f56927b766bf4ac25775521aac | Triage

Sharing

General

Target

b7740b80e7e55c51122870c5b9bcc743_JaffaCakes118
Size

704KB
Sample

240822-nkcp2sxckq
MD5

b7740b80e7e55c51122870c5b9bcc743
SHA1

2047d1d0910dadfbc163f09192ffdb8bc8c1717e
SHA256

2c04ee4cb87e9e0997b7572c12d34281375947f56927b766bf4ac25775521aac
SHA512

98685f155e4ddf37bc49625b20fdc85a78f658b6ffd6300dc3ef3780e5171bde51e70ab2714e1b90972f2d4989661bf2af49a6b2e07fb13e1434bde6436c3414
SSDEEP

12288:6qEqoY9oQsxB5FAYxl4hskilwg84Qx5guzunXMKobsETrKjMU4xO7KjMU4xO:6ZqRPsvchskilwgiMnXMRsQKjYQKjY

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b7740b80e7e55c51122870c5b9bcc743_JaffaCakes118
- Size
  
  704KB
- MD5
  
  b7740b80e7e55c51122870c5b9bcc743
- SHA1
  
  2047d1d0910dadfbc163f09192ffdb8bc8c1717e
- SHA256
  
  2c04ee4cb87e9e0997b7572c12d34281375947f56927b766bf4ac25775521aac
- SHA512
  
  98685f155e4ddf37bc49625b20fdc85a78f658b6ffd6300dc3ef3780e5171bde51e70ab2714e1b90972f2d4989661bf2af49a6b2e07fb13e1434bde6436c3414
- SSDEEP
  
  12288:6qEqoY9oQsxB5FAYxl4hskilwg84Qx5guzunXMKobsETrKjMU4xO7KjMU4xO:6ZqRPsvchskilwgiMnXMRsQKjYQKjY
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence