cf4c13acec898e8dfda2ee2cc18af281060b4f1210a7acf3d0ce741a5f7b1df5 | Triage

Sharing

General

Target

JaffaCakes118_8a8f27ab1dd1426f4c83670b661a60dc
Size

260KB
Sample

250328-lx4ceswnz6
MD5

8a8f27ab1dd1426f4c83670b661a60dc
SHA1

37b009f482608c90a64e48cf24610701a862d565
SHA256

cf4c13acec898e8dfda2ee2cc18af281060b4f1210a7acf3d0ce741a5f7b1df5
SHA512

7b88f7473b4096454948b588348451d4d6f9ba00447e624ca6567d9f1dbac6a209fc59d874762b6a73a9e59406c6630cf426d1901b80943c36aa090352c84431
SSDEEP

6144:FdVNgTSrMaIl/jcLijfHFEHWzXvjT85R:FaTSrMaIqLlI/H85R

Score

10^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_8a8f27ab1dd1426f4c83670b661a60dc
- Size
  
  260KB
- MD5
  
  8a8f27ab1dd1426f4c83670b661a60dc
- SHA1
  
  37b009f482608c90a64e48cf24610701a862d565
- SHA256
  
  cf4c13acec898e8dfda2ee2cc18af281060b4f1210a7acf3d0ce741a5f7b1df5
- SHA512
  
  7b88f7473b4096454948b588348451d4d6f9ba00447e624ca6567d9f1dbac6a209fc59d874762b6a73a9e59406c6630cf426d1901b80943c36aa090352c84431
- SSDEEP
  
  6144:FdVNgTSrMaIl/jcLijfHFEHWzXvjT85R:FaTSrMaIqLlI/H85R
Score

10^/10

defense_evasion discovery persistence
- Modifies visiblity of hidden/system files in Explorer
  defense_evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence