e48e37743c9c8ab95e03fc6fb1292889e0bce9072bacd458b9d740ed2e07cf90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1cca16dd72dd890efe2715be9fe5a0f_JaffaCakes118
Size

820KB
Sample

240907-nbdkzs1fqh
MD5

d1cca16dd72dd890efe2715be9fe5a0f
SHA1

d86a9063938c5b7e8b3ca6fc387cd83d55a2c5bb
SHA256

e48e37743c9c8ab95e03fc6fb1292889e0bce9072bacd458b9d740ed2e07cf90
SHA512

993b0f494b841a657598c970887ccb7d08c95dc522f9a218574afa3222ded1667d29b950b1863e86f13596f48afc97b7d01c60f894f9bb87d1ad5967bfd69cbd
SSDEEP

12288:rmSmYogTPe69286HAxwDjQ9jy98lkeBlwLNZA8vaSQ0IyGF5C7KttweGMp72hDFg:iYod86gxwnKjy9aLQ28vjzw4Ota2AJC5

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  JailBrekR.exe
- Size
  
  826KB
- MD5
  
  038920828f1d1985c59625b0c65b0e1d
- SHA1
  
  63954129928ef40a6c1f01e1743688a49220510d
- SHA256
  
  c60efdebcc9b46156c2264ba27601a1c8a60fa8f8683fdf0a7f05e5f0fda9650
- SHA512
  
  4f5367177f2873484cce5fec62b3f4cbefc6fbd29f9bbe16e3dd114f8a0b743fa2c53a8c19e9d4f646552c4f7f30d77b673bc3a2a9e1ace9bd85978ba538562b
- SSDEEP
  
  24576:fuod8MSx4tK/y9CLQCgvjm3h9w4OtK2OJN/:fmMxUy9nW9xoK2a/
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence