7beb18eb319097646049e624f9a4ff02976a8cd917603fe22d7f481616b3e91b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f993316983e77de72f4b1c69b2f55096_JaffaCakes118
Size

254KB
Sample

240927-dcs2ysvbjg
MD5

f993316983e77de72f4b1c69b2f55096
SHA1

37b2d0b7712fe734364f063feb7281ee9a90dda7
SHA256

7beb18eb319097646049e624f9a4ff02976a8cd917603fe22d7f481616b3e91b
SHA512

1ba86ace045bbeb795de66527327d89f82778f4760ebf0241ddf22f3260187fdb4194d1c4760984e964df450712bf48c767027b5d680998269bfbf59cc9bcde9
SSDEEP

3072:j6b3Y3Fv+f02rtGxj4OwmKy+fv7IkRYMLW+mAXrRt8x6o7Piv2Piv2Piv2Piv:jsI1mztGSH7I8YMLx32ppp

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  f993316983e77de72f4b1c69b2f55096_JaffaCakes118
- Size
  
  254KB
- MD5
  
  f993316983e77de72f4b1c69b2f55096
- SHA1
  
  37b2d0b7712fe734364f063feb7281ee9a90dda7
- SHA256
  
  7beb18eb319097646049e624f9a4ff02976a8cd917603fe22d7f481616b3e91b
- SHA512
  
  1ba86ace045bbeb795de66527327d89f82778f4760ebf0241ddf22f3260187fdb4194d1c4760984e964df450712bf48c767027b5d680998269bfbf59cc9bcde9
- SSDEEP
  
  3072:j6b3Y3Fv+f02rtGxj4OwmKy+fv7IkRYMLW+mAXrRt8x6o7Piv2Piv2Piv2Piv:jsI1mztGSH7I8YMLx32ppp
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence