5fcd5a7d5c0321e1ccede1ad2a133f135c8b08724249760512d2ed2916b19a87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea564ccabf7f9b2a17736a1c6784f111_JaffaCakes118
Size

64KB
Sample

240919-bt7kkatemm
MD5

ea564ccabf7f9b2a17736a1c6784f111
SHA1

219babcb35df02e84470eb51efd6567b53b674f7
SHA256

5fcd5a7d5c0321e1ccede1ad2a133f135c8b08724249760512d2ed2916b19a87
SHA512

03cce95fc332b5d6b047129cb0a68a22a012f032d2aa209cdff011e449fd9761f58c5bbfdcb56db21f114112b82d63ec52f5e231c8f9f3db90748662c42a1ac0
SSDEEP

768:GBZGFIzzF1/mjNgXFVdl6ih18TRZWsArsglR9kAX6ge6MLZfOnsXE09hLdX5hBa:GPdpcdiQZWpL9kAqge68lvra

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  ea564ccabf7f9b2a17736a1c6784f111_JaffaCakes118
- Size
  
  64KB
- MD5
  
  ea564ccabf7f9b2a17736a1c6784f111
- SHA1
  
  219babcb35df02e84470eb51efd6567b53b674f7
- SHA256
  
  5fcd5a7d5c0321e1ccede1ad2a133f135c8b08724249760512d2ed2916b19a87
- SHA512
  
  03cce95fc332b5d6b047129cb0a68a22a012f032d2aa209cdff011e449fd9761f58c5bbfdcb56db21f114112b82d63ec52f5e231c8f9f3db90748662c42a1ac0
- SSDEEP
  
  768:GBZGFIzzF1/mjNgXFVdl6ih18TRZWsArsglR9kAX6ge6MLZfOnsXE09hLdX5hBa:GPdpcdiQZWpL9kAqge68lvra
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation