d7a56cca4917e21f9eac6e5b95f69be0e515b222adf38b443c4c1abbefeb4779 | Triage

Sharing

General

Target

4307e445e5dd7a3b8480b64bf57ab45a_JaffaCakes118
Size

1.3MB
Sample

241014-tmnszsxfkp
MD5

4307e445e5dd7a3b8480b64bf57ab45a
SHA1

3ced041cdfcfa087ed1b8850ac46b3d60ab4b4e6
SHA256

d7a56cca4917e21f9eac6e5b95f69be0e515b222adf38b443c4c1abbefeb4779
SHA512

04bc26c53dfb6529d5c651fe1e5954b97e5f8449f570442a8dd3eb1b9f2c5f269db5f9a19d4ccfdcba3810b9e92ba071ab02d2279606f28a6c88988dbdc2da4c
SSDEEP

24576:ezbBc+A5PEAJEiC49X6kA3z0cwsAx66BBO30f+aXccs6jDjk/z/+q:e0TCjiM5wdo6BBO3BaXZhjDjkjh

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4307e445e5dd7a3b8480b64bf57ab45a_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  4307e445e5dd7a3b8480b64bf57ab45a
- SHA1
  
  3ced041cdfcfa087ed1b8850ac46b3d60ab4b4e6
- SHA256
  
  d7a56cca4917e21f9eac6e5b95f69be0e515b222adf38b443c4c1abbefeb4779
- SHA512
  
  04bc26c53dfb6529d5c651fe1e5954b97e5f8449f570442a8dd3eb1b9f2c5f269db5f9a19d4ccfdcba3810b9e92ba071ab02d2279606f28a6c88988dbdc2da4c
- SSDEEP
  
  24576:ezbBc+A5PEAJEiC49X6kA3z0cwsAx66BBO30f+aXccs6jDjk/z/+q:e0TCjiM5wdo6BBO3BaXZhjDjkjh
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence