9a7da26e52bfe7daa01a5b0f0baf132423637ad5d0887f74529e47ee52508de2 | Triage

Sharing

General

Target

11ea2baa33e110ce37bff9e507257adf_JaffaCakes118
Size

16KB
Sample

240328-2qengsbe27
MD5

11ea2baa33e110ce37bff9e507257adf
SHA1

8381d232ebbbbae0034ce1d41e4ce6b07d9e0cf4
SHA256

9a7da26e52bfe7daa01a5b0f0baf132423637ad5d0887f74529e47ee52508de2
SHA512

2763aee443599edeea55c6c03de66c897e94b741c270e3db35ffd78bb41969c7a9888b2728a54afd1693d1075f1cc4871853e9ee5b94c152f9c9e329058c104a
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx:hDXWipuE+K3/SSHgxmH

Score

7^/10

Malware Config

Targets

- Target
  
  11ea2baa33e110ce37bff9e507257adf_JaffaCakes118
- Size
  
  16KB
- MD5
  
  11ea2baa33e110ce37bff9e507257adf
- SHA1
  
  8381d232ebbbbae0034ce1d41e4ce6b07d9e0cf4
- SHA256
  
  9a7da26e52bfe7daa01a5b0f0baf132423637ad5d0887f74529e47ee52508de2
- SHA512
  
  2763aee443599edeea55c6c03de66c897e94b741c270e3db35ffd78bb41969c7a9888b2728a54afd1693d1075f1cc4871853e9ee5b94c152f9c9e329058c104a
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx:hDXWipuE+K3/SSHgxmH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2