66db5f8b36aa1ea9da62a3d944ba382026572afcabd15c9bf88c99db5dab7255 | Triage

Sharing

General

Target

0a47fb34dcbb21b5141f2fb00b87beb3_JaffaCakes118
Size

14KB
Sample

240328-tseghabd45
MD5

0a47fb34dcbb21b5141f2fb00b87beb3
SHA1

eadb4d33eb863ffdc55d8d81588a6d551bbdea58
SHA256

66db5f8b36aa1ea9da62a3d944ba382026572afcabd15c9bf88c99db5dab7255
SHA512

8d6ac2497723668ffc22f032e94632239d62e2044a654ffec4859b3f8d12f828a6c864f93d0e03e8470164526b42d6147da5ba73408bbfabc0af5f00eff5a3e1
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhXt0HoV:hDXWipuE+K3/SSHgxgHk

Score

7^/10

Malware Config

Targets

- Target
  
  0a47fb34dcbb21b5141f2fb00b87beb3_JaffaCakes118
- Size
  
  14KB
- MD5
  
  0a47fb34dcbb21b5141f2fb00b87beb3
- SHA1
  
  eadb4d33eb863ffdc55d8d81588a6d551bbdea58
- SHA256
  
  66db5f8b36aa1ea9da62a3d944ba382026572afcabd15c9bf88c99db5dab7255
- SHA512
  
  8d6ac2497723668ffc22f032e94632239d62e2044a654ffec4859b3f8d12f828a6c864f93d0e03e8470164526b42d6147da5ba73408bbfabc0af5f00eff5a3e1
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhXt0HoV:hDXWipuE+K3/SSHgxgHk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2