ae34d732fe24c30540f4457c771c25d1fea3670ade31a4f7b0deee169ed49381 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d250782b8427fc0a77490b721453dc78_JaffaCakes118
Size

223KB
Sample

240907-tg7nxasajl
MD5

d250782b8427fc0a77490b721453dc78
SHA1

891b8cfacaadaf916a5b1e62e7c7dc70729e9ad0
SHA256

ae34d732fe24c30540f4457c771c25d1fea3670ade31a4f7b0deee169ed49381
SHA512

61d2128ea901b0daf4a0b7612e61b32d8e4d55da4a9f34540c47e1d0bcbd0d7a39b7e8fd79ae1efea85f2ecec1a60fabe06dd8fa7c3742290a7e50d5f6348e04
SSDEEP

3072:8bDeUTmIq+7XLlUnmVHsg7aaaaaaiksh0X20/wX4OLBXKcPwit22ghf:8HfTmIqMXLlUrkVXJYXxJPj22w

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d250782b8427fc0a77490b721453dc78_JaffaCakes118
- Size
  
  223KB
- MD5
  
  d250782b8427fc0a77490b721453dc78
- SHA1
  
  891b8cfacaadaf916a5b1e62e7c7dc70729e9ad0
- SHA256
  
  ae34d732fe24c30540f4457c771c25d1fea3670ade31a4f7b0deee169ed49381
- SHA512
  
  61d2128ea901b0daf4a0b7612e61b32d8e4d55da4a9f34540c47e1d0bcbd0d7a39b7e8fd79ae1efea85f2ecec1a60fabe06dd8fa7c3742290a7e50d5f6348e04
- SSDEEP
  
  3072:8bDeUTmIq+7XLlUnmVHsg7aaaaaaiksh0X20/wX4OLBXKcPwit22ghf:8HfTmIqMXLlUrkVXJYXxJPj22w
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence