0d300e405486d24ff5910d1f9b29f88bcb5425ac559634dcbaed6e2fcfeba551 | Triage

Sharing

General

Target

dba1f8deb38b39cc6fb08a8633de1ee2_JaffaCakes118
Size

72KB
Sample

240912-cl8y4awckj
MD5

dba1f8deb38b39cc6fb08a8633de1ee2
SHA1

89989411515c1e469f017b9b721f9bea302d7cd4
SHA256

0d300e405486d24ff5910d1f9b29f88bcb5425ac559634dcbaed6e2fcfeba551
SHA512

3cee0ef1f7636b74f2450b0678a03ad3d63f29460a48b41270e6aa4fde7d1eb2c19e831b1e0d3dbbad48d99cbe7d67bf0d65b9ca071871dc03f72cf209252138
SSDEEP

1536:iFBfsS24ZlDQ+j8jjE+OzUaQ+MpDS6QsQ+wQ++Q+VOZL:iFBfsSZZOrh1SlHaYIM

Score

10^/10

defense_evasion discovery evasion persistence

Malware Config

Targets

- Target
  
  dba1f8deb38b39cc6fb08a8633de1ee2_JaffaCakes118
- Size
  
  72KB
- MD5
  
  dba1f8deb38b39cc6fb08a8633de1ee2
- SHA1
  
  89989411515c1e469f017b9b721f9bea302d7cd4
- SHA256
  
  0d300e405486d24ff5910d1f9b29f88bcb5425ac559634dcbaed6e2fcfeba551
- SHA512
  
  3cee0ef1f7636b74f2450b0678a03ad3d63f29460a48b41270e6aa4fde7d1eb2c19e831b1e0d3dbbad48d99cbe7d67bf0d65b9ca071871dc03f72cf209252138
- SSDEEP
  
  1536:iFBfsS24ZlDQ+j8jjE+OzUaQ+MpDS6QsQ+wQ++Q+VOZL:iFBfsSZZOrh1SlHaYIM
Score

10^/10

defense_evasion discovery evasion persistence
- Modifies visibility of file extensions in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionpersistence

behavioral2

defense_evasiondiscoveryevasionpersistence