d2d5301af2fde29bd8370a0aadd2beb26263a9c8e19af55009ad7b74a742ad83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd7767e0f903896b01ef02ad3075ca4f_JaffaCakes118
Size

36KB
Sample

240913-cpw4psycmm
MD5

dd7767e0f903896b01ef02ad3075ca4f
SHA1

c4e902c127def9fdf77ebe5d801cefa2cd5d4a05
SHA256

d2d5301af2fde29bd8370a0aadd2beb26263a9c8e19af55009ad7b74a742ad83
SHA512

b1d6ec90a77a32126f42f7c33fac96b6d1941f020c5afdde0256eeaa2ccf2b29817b2d4d01c588cd198474915cb29e3f68ad88e45cf5a84ef28dc5619622f892
SSDEEP

384:ZvceJQbhx+eQ9bQNpk/yJB1G6WWmCLWONzhiKzXJwPUUewhVUpl5yN1ZaDbk:Obhx+eQhk5dG6WWhRzXJwPpjil5yNOk

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  dd7767e0f903896b01ef02ad3075ca4f_JaffaCakes118
- Size
  
  36KB
- MD5
  
  dd7767e0f903896b01ef02ad3075ca4f
- SHA1
  
  c4e902c127def9fdf77ebe5d801cefa2cd5d4a05
- SHA256
  
  d2d5301af2fde29bd8370a0aadd2beb26263a9c8e19af55009ad7b74a742ad83
- SHA512
  
  b1d6ec90a77a32126f42f7c33fac96b6d1941f020c5afdde0256eeaa2ccf2b29817b2d4d01c588cd198474915cb29e3f68ad88e45cf5a84ef28dc5619622f892
- SSDEEP
  
  384:ZvceJQbhx+eQ9bQNpk/yJB1G6WWmCLWONzhiKzXJwPUUewhVUpl5yN1ZaDbk:Obhx+eQhk5dG6WWhRzXJwPpjil5yNOk
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence