dcc188d9e72f3e3184e2baec3e8c3db39ca5715dca36d7fc9cad6e4b986ffac9 | Triage

Sharing

General

Target

084918a64e3d35d90f88168d8d03fc46_JaffaCakes118
Size

188KB
Sample

241002-b1992avblb
MD5

084918a64e3d35d90f88168d8d03fc46
SHA1

514cf2091d01aada3e6d30d66b1cc5a9aa47cc55
SHA256

dcc188d9e72f3e3184e2baec3e8c3db39ca5715dca36d7fc9cad6e4b986ffac9
SHA512

5c9305b188370415ec19cc756dcf7f6a1350fb5f9470eb2027835daa047a0cabe38b07f67703ceb92b200e22969445a2d1111ef23ba2387c5a8a86ed22795897
SSDEEP

3072:4EXptNJfy942dkEUs7nT0tIszmbx/Bu0FvorZLFk27xvHJl9vFY9NJGXKF3G26VJ:4mKbxIW6ZBk27xxl9C6Ya

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  084918a64e3d35d90f88168d8d03fc46_JaffaCakes118
- Size
  
  188KB
- MD5
  
  084918a64e3d35d90f88168d8d03fc46
- SHA1
  
  514cf2091d01aada3e6d30d66b1cc5a9aa47cc55
- SHA256
  
  dcc188d9e72f3e3184e2baec3e8c3db39ca5715dca36d7fc9cad6e4b986ffac9
- SHA512
  
  5c9305b188370415ec19cc756dcf7f6a1350fb5f9470eb2027835daa047a0cabe38b07f67703ceb92b200e22969445a2d1111ef23ba2387c5a8a86ed22795897
- SSDEEP
  
  3072:4EXptNJfy942dkEUs7nT0tIszmbx/Bu0FvorZLFk27xvHJl9vFY9NJGXKF3G26VJ:4mKbxIW6ZBk27xxl9C6Ya
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence