1db112cc9184f4d5b33962acc81db2423a1e4ebecc3e5c5108647042a4202440 | Triage

Sharing

General

Target

d3a209d56a3e48a327fdacd4b60dd5e1_JaffaCakes118
Size

152KB
Sample

240908-f1va2ayfqk
MD5

d3a209d56a3e48a327fdacd4b60dd5e1
SHA1

b79c9b4266fbbbbed462c7695dcb1d3af2c32ee2
SHA256

1db112cc9184f4d5b33962acc81db2423a1e4ebecc3e5c5108647042a4202440
SHA512

d65769184cf343b8fe7224a2de1c965984ea91ca9ff18709de5b766a1b9530d588df5126910312c2cf86c8b4176b85547ec9d6d67b21614386767894f2dadb4e
SSDEEP

3072:3DbEFv76nbvsMcZ3eawlI88rnXD2olnmIE5j4oQU:TSv76nbvsh1eI8onBod

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d3a209d56a3e48a327fdacd4b60dd5e1_JaffaCakes118
- Size
  
  152KB
- MD5
  
  d3a209d56a3e48a327fdacd4b60dd5e1
- SHA1
  
  b79c9b4266fbbbbed462c7695dcb1d3af2c32ee2
- SHA256
  
  1db112cc9184f4d5b33962acc81db2423a1e4ebecc3e5c5108647042a4202440
- SHA512
  
  d65769184cf343b8fe7224a2de1c965984ea91ca9ff18709de5b766a1b9530d588df5126910312c2cf86c8b4176b85547ec9d6d67b21614386767894f2dadb4e
- SSDEEP
  
  3072:3DbEFv76nbvsMcZ3eawlI88rnXD2olnmIE5j4oQU:TSv76nbvsh1eI8onBod
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence