b627f373b6d0e3db9fe611380c310dc834a0214452e793baa9609bef2cdaf233 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0da5686f7ab7da0ceb95a1067ea44e08_JaffaCakes118
Size

96KB
Sample

241003-dr114svhpc
MD5

0da5686f7ab7da0ceb95a1067ea44e08
SHA1

5a7ed8eea94a940068cc89bc66c3f8f6ed38401f
SHA256

b627f373b6d0e3db9fe611380c310dc834a0214452e793baa9609bef2cdaf233
SHA512

5b27ce473eb27995c7ac324db7656970336132718f51f6f2929f8672ebeea2885f070c48775b9ddc5274295f325388a1769a17cc16c3cf9160501fd0378780e9
SSDEEP

1536:igYPhQXwIiPrrjThO+lUBrzCxry1ec7rUyj239au7538iJkZbyfF:FYP2XerzhOUxu/XUtauF8iJkZbk

Score

8^/10

defense_evasion discovery evasion execution persistence

Malware Config

Targets

- Target
  
  0da5686f7ab7da0ceb95a1067ea44e08_JaffaCakes118
- Size
  
  96KB
- MD5
  
  0da5686f7ab7da0ceb95a1067ea44e08
- SHA1
  
  5a7ed8eea94a940068cc89bc66c3f8f6ed38401f
- SHA256
  
  b627f373b6d0e3db9fe611380c310dc834a0214452e793baa9609bef2cdaf233
- SHA512
  
  5b27ce473eb27995c7ac324db7656970336132718f51f6f2929f8672ebeea2885f070c48775b9ddc5274295f325388a1769a17cc16c3cf9160501fd0378780e9
- SSDEEP
  
  1536:igYPhQXwIiPrrjThO+lUBrzCxry1ec7rUyj239au7538iJkZbyfF:FYP2XerzhOUxu/XUtauF8iJkZbk
Score

8^/10

defense_evasion discovery evasion execution persistence
- Creates new service(s)
  persistence execution
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionpersistence

behavioral2

defense_evasiondiscoveryevasionexecutionpersistence