2f4aa35003418807ea4d8fcdbea11259a879e07960ac778a59c66cb37907e92b | Triage

Sharing

General

Target

JaffaCakes118_8a8b6168b4618452923d207145ce05fe
Size

80KB
Sample

250328-llakzatzht
MD5

8a8b6168b4618452923d207145ce05fe
SHA1

85df3268dad82c4e7355c05b87324e56107d2cc6
SHA256

2f4aa35003418807ea4d8fcdbea11259a879e07960ac778a59c66cb37907e92b
SHA512

2b2089a9eb23f6b72632d5e7434266cddeed7ea4fd0851ee9bb8e2fdcfface1cee11f16376e269d67c62b27e9d6302aaf6c534d8acc3acd55769cfe67dc49d62
SSDEEP

1536:EsPdg+Y16Lti8n42APNR2dcScLcPcxeTanuUHWOls3xxNMq39gk34iS6G:qM4PNEdcScLcPcfnuH0yG

Score

10^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_8a8b6168b4618452923d207145ce05fe
- Size
  
  80KB
- MD5
  
  8a8b6168b4618452923d207145ce05fe
- SHA1
  
  85df3268dad82c4e7355c05b87324e56107d2cc6
- SHA256
  
  2f4aa35003418807ea4d8fcdbea11259a879e07960ac778a59c66cb37907e92b
- SHA512
  
  2b2089a9eb23f6b72632d5e7434266cddeed7ea4fd0851ee9bb8e2fdcfface1cee11f16376e269d67c62b27e9d6302aaf6c534d8acc3acd55769cfe67dc49d62
- SSDEEP
  
  1536:EsPdg+Y16Lti8n42APNR2dcScLcPcxeTanuUHWOls3xxNMq39gk34iS6G:qM4PNEdcScLcPcfnuH0yG
Score

10^/10

defense_evasion discovery persistence
- Modifies visiblity of hidden/system files in Explorer
  defense_evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence