56697b254e8af68aeb8a6940dfff89088f1e96b43e36bdb062c0fb63f938092a | Triage

Sharing

General

Target

0a845cefe0ae5cb677c9f1b6cce7aa17_JaffaCakes118
Size

14KB
Sample

240328-tzjpssaf9s
MD5

0a845cefe0ae5cb677c9f1b6cce7aa17
SHA1

4af06678f4e6e2614ecdb78d4b567763911dd6c2
SHA256

56697b254e8af68aeb8a6940dfff89088f1e96b43e36bdb062c0fb63f938092a
SHA512

96460cc081f0f6bdc08c9ff025dde992b9dff91d238ac7a4061d62a0638dc62f26c4409a46d624faf5611ff9804deacaee25c023cfa18af8800ea17e47f092a2
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhXc5:hDXWipuE+K3/SSHgxq5

Score

7^/10

Malware Config

Targets

- Target
  
  0a845cefe0ae5cb677c9f1b6cce7aa17_JaffaCakes118
- Size
  
  14KB
- MD5
  
  0a845cefe0ae5cb677c9f1b6cce7aa17
- SHA1
  
  4af06678f4e6e2614ecdb78d4b567763911dd6c2
- SHA256
  
  56697b254e8af68aeb8a6940dfff89088f1e96b43e36bdb062c0fb63f938092a
- SHA512
  
  96460cc081f0f6bdc08c9ff025dde992b9dff91d238ac7a4061d62a0638dc62f26c4409a46d624faf5611ff9804deacaee25c023cfa18af8800ea17e47f092a2
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhXc5:hDXWipuE+K3/SSHgxq5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2