41ffda15f97dd81fcc1869c808c010f5afa5c95afdc39c04587f9bc9bbb10ffa | Triage

Sharing

General

Target

c259b072ae7d0800fde6a4ad986fdc04_JaffaCakes118
Size

664KB
Sample

240826-fvtgjsycnl
MD5

c259b072ae7d0800fde6a4ad986fdc04
SHA1

7e92d31be94ab7e6fda079f4a20cf9909bb575d9
SHA256

41ffda15f97dd81fcc1869c808c010f5afa5c95afdc39c04587f9bc9bbb10ffa
SHA512

ac8c3d9eeb93c7378e879eae23d2e0d1eae20852ea01f1ebba8770c3c8f47e51a3452af03d80d291cf730790cd2f7188820a10a37d218d075a89339b8f405293
SSDEEP

12288:YePGKNeHO3fc7D9M48TL4q0d7zyxnVVejjAGihQK87n:xsDcTX0vyWsGihq7n

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c259b072ae7d0800fde6a4ad986fdc04_JaffaCakes118
- Size
  
  664KB
- MD5
  
  c259b072ae7d0800fde6a4ad986fdc04
- SHA1
  
  7e92d31be94ab7e6fda079f4a20cf9909bb575d9
- SHA256
  
  41ffda15f97dd81fcc1869c808c010f5afa5c95afdc39c04587f9bc9bbb10ffa
- SHA512
  
  ac8c3d9eeb93c7378e879eae23d2e0d1eae20852ea01f1ebba8770c3c8f47e51a3452af03d80d291cf730790cd2f7188820a10a37d218d075a89339b8f405293
- SSDEEP
  
  12288:YePGKNeHO3fc7D9M48TL4q0d7zyxnVVejjAGihQK87n:xsDcTX0vyWsGihq7n
Score

8^/10

discovery persistence
- Blocklisted process makes network request
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence