c98ab7441e92ba4107cf63062c8b43ec8c0bc0e0b40c66e870194dea78360a09 | Triage

Sharing

General

Target

004df9eda4bb9a7589cdc8d4e5ed9620_JaffaCakes118
Size

16KB
Sample

240328-h5a43afc7v
MD5

004df9eda4bb9a7589cdc8d4e5ed9620
SHA1

35c6338c8dc3f3a89dcb6ad89722697e82ef04e6
SHA256

c98ab7441e92ba4107cf63062c8b43ec8c0bc0e0b40c66e870194dea78360a09
SHA512

61254800e0aa4658cb60946a999a3c8a80bca3b309fd28eb822b2b8501adf4a932190ad4aae33b809cfa925b571d37e591864717d46d1867793353a70da3194f
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJUc+2:hDXWipuE+K3/SSHgxy2

Score

7^/10

Malware Config

Targets

- Target
  
  004df9eda4bb9a7589cdc8d4e5ed9620_JaffaCakes118
- Size
  
  16KB
- MD5
  
  004df9eda4bb9a7589cdc8d4e5ed9620
- SHA1
  
  35c6338c8dc3f3a89dcb6ad89722697e82ef04e6
- SHA256
  
  c98ab7441e92ba4107cf63062c8b43ec8c0bc0e0b40c66e870194dea78360a09
- SHA512
  
  61254800e0aa4658cb60946a999a3c8a80bca3b309fd28eb822b2b8501adf4a932190ad4aae33b809cfa925b571d37e591864717d46d1867793353a70da3194f
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJUc+2:hDXWipuE+K3/SSHgxy2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2