56607a606137a6da89ed67a9f692a8d49956485db33df7e2de5ddc6d16c1a446 | Triage

Sharing

General

Target

eaa401c229c5233690ae85800f398655_JaffaCakes118
Size

246KB
Sample

240919-frybbsscmf
MD5

eaa401c229c5233690ae85800f398655
SHA1

1fac6317a45ab3be798ac1cadd3a59701c0c5db2
SHA256

56607a606137a6da89ed67a9f692a8d49956485db33df7e2de5ddc6d16c1a446
SHA512

1fa521b8314515266552c41212d99e8f658add7f47087e30c30ef46c1d04e5ee674f781c4f32b6542f294ec093fc56388d84f08ef3014a5f94f1f441c816f159
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8wpjBFy11AwE:o68i3odBiTl2+TCU/1huhuIpRL5uP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eaa401c229c5233690ae85800f398655_JaffaCakes118
- Size
  
  246KB
- MD5
  
  eaa401c229c5233690ae85800f398655
- SHA1
  
  1fac6317a45ab3be798ac1cadd3a59701c0c5db2
- SHA256
  
  56607a606137a6da89ed67a9f692a8d49956485db33df7e2de5ddc6d16c1a446
- SHA512
  
  1fa521b8314515266552c41212d99e8f658add7f47087e30c30ef46c1d04e5ee674f781c4f32b6542f294ec093fc56388d84f08ef3014a5f94f1f441c816f159
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8wpjBFy11AwE:o68i3odBiTl2+TCU/1huhuIpRL5uP
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence