c0c611fc52fd69513a900c8314f6ae4fe570c2a67171d577ed4fc84f8d26143a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36984cc18115de51ad5dd043ca5c42c2_JaffaCakes118
Size

6.3MB
Sample

241011-yv864swckq
MD5

36984cc18115de51ad5dd043ca5c42c2
SHA1

c826ef3b992454853dd1cfd7810250705bfb9985
SHA256

c0c611fc52fd69513a900c8314f6ae4fe570c2a67171d577ed4fc84f8d26143a
SHA512

aafdf5aa241b8a16ce3dd1b6afaf07648582ee56d9ec7cae607e7f798efa908886239cb29d542f4eabe711589492a430ee0a692e6867ee9188dd0d47e5178eeb
SSDEEP

98304:tNCb2LeRP5FDDJe1BHEamk+sqjBwInyXa4LQ1BT6SPJ14bQL2mlHEVhB3ffYG73f:fWDekaBq9wI34gLLBch1f13f

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  36984cc18115de51ad5dd043ca5c42c2_JaffaCakes118
- Size
  
  6.3MB
- MD5
  
  36984cc18115de51ad5dd043ca5c42c2
- SHA1
  
  c826ef3b992454853dd1cfd7810250705bfb9985
- SHA256
  
  c0c611fc52fd69513a900c8314f6ae4fe570c2a67171d577ed4fc84f8d26143a
- SHA512
  
  aafdf5aa241b8a16ce3dd1b6afaf07648582ee56d9ec7cae607e7f798efa908886239cb29d542f4eabe711589492a430ee0a692e6867ee9188dd0d47e5178eeb
- SSDEEP
  
  98304:tNCb2LeRP5FDDJe1BHEamk+sqjBwInyXa4LQ1BT6SPJ14bQL2mlHEVhB3ffYG73f:fWDekaBq9wI34gLLBch1f13f
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence