bca4eb27acd528d4445b98f554ec467550aad47a420ea35792f5312a35ead7e1 | Triage

Sharing

General

Target

17ca72a5069455c2f17ba29daa6b6509_JaffaCakes118
Size

336KB
Sample

241006-myvx4szeqj
MD5

17ca72a5069455c2f17ba29daa6b6509
SHA1

2c6f13dcb829d37c872f2351569a30db65228d95
SHA256

bca4eb27acd528d4445b98f554ec467550aad47a420ea35792f5312a35ead7e1
SHA512

7362dc43e8a17140cd4b7991c2a32c3e725520ac7d93b5a20f9fbb2b18887552a9d80fd5729db301f6415567622ad145cd57a3a2b2c1df91e58397f02d77d98f
SSDEEP

6144:LehMrMROkn8zXEjZ3ix9F/HysXBJvvuHaaTyI4EEj3aBRsytnI+:LvmmIZyxT/SCBJuHryIg+sgI+

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  17ca72a5069455c2f17ba29daa6b6509_JaffaCakes118
- Size
  
  336KB
- MD5
  
  17ca72a5069455c2f17ba29daa6b6509
- SHA1
  
  2c6f13dcb829d37c872f2351569a30db65228d95
- SHA256
  
  bca4eb27acd528d4445b98f554ec467550aad47a420ea35792f5312a35ead7e1
- SHA512
  
  7362dc43e8a17140cd4b7991c2a32c3e725520ac7d93b5a20f9fbb2b18887552a9d80fd5729db301f6415567622ad145cd57a3a2b2c1df91e58397f02d77d98f
- SSDEEP
  
  6144:LehMrMROkn8zXEjZ3ix9F/HysXBJvvuHaaTyI4EEj3aBRsytnI+:LvmmIZyxT/SCBJuHryIg+sgI+
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence