ccaaf8f9180546b48fd55138e08651530915c0a42d9a5dbd501102571a5d9db9 | Triage

Sharing

General

Target

ed4742dc529778b9a5f665c403516ed7_JaffaCakes118
Size

92KB
Sample

240920-k7jv4azajq
MD5

ed4742dc529778b9a5f665c403516ed7
SHA1

19f3569acdb3a8126c7e80613765de43d8854ec3
SHA256

ccaaf8f9180546b48fd55138e08651530915c0a42d9a5dbd501102571a5d9db9
SHA512

a8b6c481bdf150d7772dad0987171512aba4261e96801ae50a41b644edc92edca1a82e044c41e96ef94bd8070f90b938ae88454a2d54b5a0f0681d6a0b1617c7
SSDEEP

1536:F4jWhbgC8UeIXcBnSxrwNCs1qPerIfynVDiC1M1p1w1s1h1R15UVnV4kTbc0:4WaC8UepnSxrwNCs1qPb5Ur4Qj

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  ed4742dc529778b9a5f665c403516ed7_JaffaCakes118
- Size
  
  92KB
- MD5
  
  ed4742dc529778b9a5f665c403516ed7
- SHA1
  
  19f3569acdb3a8126c7e80613765de43d8854ec3
- SHA256
  
  ccaaf8f9180546b48fd55138e08651530915c0a42d9a5dbd501102571a5d9db9
- SHA512
  
  a8b6c481bdf150d7772dad0987171512aba4261e96801ae50a41b644edc92edca1a82e044c41e96ef94bd8070f90b938ae88454a2d54b5a0f0681d6a0b1617c7
- SSDEEP
  
  1536:F4jWhbgC8UeIXcBnSxrwNCs1qPerIfynVDiC1M1p1w1s1h1R15UVnV4kTbc0:4WaC8UepnSxrwNCs1qPb5Ur4Qj
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence