0f51b6c2f5ae1eef21dda2036a57113f5cb7a739e372bb904b906173ad97d6a9 | Triage

Sharing

General

Target

02630073f2a232321dfd12ceafeef987_JaffaCakes118
Size

15KB
Sample

240328-lpwbvafd63
MD5

02630073f2a232321dfd12ceafeef987
SHA1

8b0ad259468cb47211417feb342dc6abc16fa97a
SHA256

0f51b6c2f5ae1eef21dda2036a57113f5cb7a739e372bb904b906173ad97d6a9
SHA512

a98098c76165211f793eef67c54b89f77e9dce3ca3c6fec647e5b9cdfa21fb000b8e1ce0a7ba4d3ed44d7bdc36a59e8c67b1b834e2c1348cd38136ea5caec960
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh4cnwK:hDXWipuE+K3/SSHgx/wK

Score

7^/10

Malware Config

Targets

- Target
  
  02630073f2a232321dfd12ceafeef987_JaffaCakes118
- Size
  
  15KB
- MD5
  
  02630073f2a232321dfd12ceafeef987
- SHA1
  
  8b0ad259468cb47211417feb342dc6abc16fa97a
- SHA256
  
  0f51b6c2f5ae1eef21dda2036a57113f5cb7a739e372bb904b906173ad97d6a9
- SHA512
  
  a98098c76165211f793eef67c54b89f77e9dce3ca3c6fec647e5b9cdfa21fb000b8e1ce0a7ba4d3ed44d7bdc36a59e8c67b1b834e2c1348cd38136ea5caec960
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh4cnwK:hDXWipuE+K3/SSHgx/wK
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2