d685d94417eb08db45f8c8a55d251fa2ffd29b76c85715fba6d072ddf5837134 | Triage

Sharing

General

Target

efa497ff9ba6832c9372612a7068c61d_JaffaCakes118
Size

221KB
Sample

240921-m17ppayfkq
MD5

efa497ff9ba6832c9372612a7068c61d
SHA1

a4cf74a22a0e765b9f4d9d3b7ab2bba6036be3e5
SHA256

d685d94417eb08db45f8c8a55d251fa2ffd29b76c85715fba6d072ddf5837134
SHA512

f8ca205bc4eb6e7ce58a63118530855c8526318731c70cbfeddb42d3807b2a981996accbb42b3f97f375b7207c36820ddc6dc0f94003903ac93ee267ea8656a1
SSDEEP

3072:0pO+fIbtl2FnCmj3cpYL9vyThhekT+2k/ZkGt2eWXEVXSDq9I6hvqAeiLEIX:mOXZ/maLekeZ/t2eWUViDqKceiDX

Score

10^/10

discovery evasion persistence upx

Malware Config

Targets

- Target
  
  efa497ff9ba6832c9372612a7068c61d_JaffaCakes118
- Size
  
  221KB
- MD5
  
  efa497ff9ba6832c9372612a7068c61d
- SHA1
  
  a4cf74a22a0e765b9f4d9d3b7ab2bba6036be3e5
- SHA256
  
  d685d94417eb08db45f8c8a55d251fa2ffd29b76c85715fba6d072ddf5837134
- SHA512
  
  f8ca205bc4eb6e7ce58a63118530855c8526318731c70cbfeddb42d3807b2a981996accbb42b3f97f375b7207c36820ddc6dc0f94003903ac93ee267ea8656a1
- SSDEEP
  
  3072:0pO+fIbtl2FnCmj3cpYL9vyThhekT+2k/ZkGt2eWXEVXSDq9I6hvqAeiLEIX:mOXZ/maLekeZ/t2eWUViDqKceiDX
Score

10^/10

discovery evasion persistence upx
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceupx

behavioral2

discoveryevasionpersistenceupx