089d7ce9b5c1ed4f128a58f0b396c1bab60e60cddc232fbddc0535591fdc9bf1 | Triage

Sharing

General

Target

1243606b8fd6fd0c8f953fcb63f0f732_JaffaCakes118
Size

232KB
Sample

241004-hh37bszcqq
MD5

1243606b8fd6fd0c8f953fcb63f0f732
SHA1

35a45fb60801022c50515e5d0ee11ba5fd292f4f
SHA256

089d7ce9b5c1ed4f128a58f0b396c1bab60e60cddc232fbddc0535591fdc9bf1
SHA512

90d222df818802216d2e16a25e439c28777b1fbb33fd1011527c4f11d002567ada5b4fc0b94ae3dd47608149db2cd74ae1b0ae5a89c2501576d8b5d740fd56f7
SSDEEP

6144:Qh3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkubS/:yPhJuBXVbkxJbC

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  1243606b8fd6fd0c8f953fcb63f0f732_JaffaCakes118
- Size
  
  232KB
- MD5
  
  1243606b8fd6fd0c8f953fcb63f0f732
- SHA1
  
  35a45fb60801022c50515e5d0ee11ba5fd292f4f
- SHA256
  
  089d7ce9b5c1ed4f128a58f0b396c1bab60e60cddc232fbddc0535591fdc9bf1
- SHA512
  
  90d222df818802216d2e16a25e439c28777b1fbb33fd1011527c4f11d002567ada5b4fc0b94ae3dd47608149db2cd74ae1b0ae5a89c2501576d8b5d740fd56f7
- SSDEEP
  
  6144:Qh3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkubS/:yPhJuBXVbkxJbC
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence