422983fee681fc62b9a244f927390d06a4d85e4e593385c8ee770015ef639f6a | Triage

Sharing

General

Target

456d6e76a20bdb77dcd11ad926a096ab_JaffaCakes118
Size

206KB
Sample

241015-c6lz3azgjb
MD5

456d6e76a20bdb77dcd11ad926a096ab
SHA1

bc1ffe739cff8faf7f3760ba18794b343d8e0f2b
SHA256

422983fee681fc62b9a244f927390d06a4d85e4e593385c8ee770015ef639f6a
SHA512

416720561f900e5b0aaade1237ee894ddd114d0a8ffabc2e5d250684cf9b17ad6a304760ebc7e17f5ff8cb55cb18381397b012efa8600b62681490cd7bc92761
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8rpjBFy11Awq:o68i3odBiTl2+TCU/ehuhuAkv

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  456d6e76a20bdb77dcd11ad926a096ab_JaffaCakes118
- Size
  
  206KB
- MD5
  
  456d6e76a20bdb77dcd11ad926a096ab
- SHA1
  
  bc1ffe739cff8faf7f3760ba18794b343d8e0f2b
- SHA256
  
  422983fee681fc62b9a244f927390d06a4d85e4e593385c8ee770015ef639f6a
- SHA512
  
  416720561f900e5b0aaade1237ee894ddd114d0a8ffabc2e5d250684cf9b17ad6a304760ebc7e17f5ff8cb55cb18381397b012efa8600b62681490cd7bc92761
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8rpjBFy11Awq:o68i3odBiTl2+TCU/ehuhuAkv
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence