20a7cc74b07a857a7e6c30daa5851f0d505dcae397fbb577453414f45bc7c474 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09ee90479f477245462c6e4548171395_JaffaCakes118
Size

230KB
Sample

241002-k442vssbjb
MD5

09ee90479f477245462c6e4548171395
SHA1

1974bddec5e698fe64536085cbaf3394c748689b
SHA256

20a7cc74b07a857a7e6c30daa5851f0d505dcae397fbb577453414f45bc7c474
SHA512

bf7dad279de2390401eaf0ae743dff240040a4068c197d9245e08e2b12e20a73f32347b206fc6cf012f33846b22d1cdf17a6d08c47c1b43019f6c9ee21f45237
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/k8ZplpjBFy11L:o68i3odBiTl2+TCU//huhuIpd

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  09ee90479f477245462c6e4548171395_JaffaCakes118
- Size
  
  230KB
- MD5
  
  09ee90479f477245462c6e4548171395
- SHA1
  
  1974bddec5e698fe64536085cbaf3394c748689b
- SHA256
  
  20a7cc74b07a857a7e6c30daa5851f0d505dcae397fbb577453414f45bc7c474
- SHA512
  
  bf7dad279de2390401eaf0ae743dff240040a4068c197d9245e08e2b12e20a73f32347b206fc6cf012f33846b22d1cdf17a6d08c47c1b43019f6c9ee21f45237
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/k8ZplpjBFy11L:o68i3odBiTl2+TCU//huhuIpd
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence