3a987258428a234acca7a1b6ed6d8d884e6fcbeafe89711265891ede265e2bda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

077974dc2cd5f501cf4c8f0a3f297bf1_JaffaCakes118
Size

20KB
Sample

240328-rec1eaga7z
MD5

077974dc2cd5f501cf4c8f0a3f297bf1
SHA1

fba575c214522a811b773de5496856767f8c9ef9
SHA256

3a987258428a234acca7a1b6ed6d8d884e6fcbeafe89711265891ede265e2bda
SHA512

22ad975d62ec7d3c1948e90fe87abf701e98e02ff077d29af6371f900f848b8a49292b04813ff5f1e1d43dbc307e74b0faf92549d5333cd23f479b3e01b20634
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L410:hDXWipuE+K3/SSHgxmHZ10

Score

7^/10

Malware Config

Targets

- Target
  
  077974dc2cd5f501cf4c8f0a3f297bf1_JaffaCakes118
- Size
  
  20KB
- MD5
  
  077974dc2cd5f501cf4c8f0a3f297bf1
- SHA1
  
  fba575c214522a811b773de5496856767f8c9ef9
- SHA256
  
  3a987258428a234acca7a1b6ed6d8d884e6fcbeafe89711265891ede265e2bda
- SHA512
  
  22ad975d62ec7d3c1948e90fe87abf701e98e02ff077d29af6371f900f848b8a49292b04813ff5f1e1d43dbc307e74b0faf92549d5333cd23f479b3e01b20634
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L410:hDXWipuE+K3/SSHgxmHZ10
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2