4e4010c3961d59d5236bd596364f21f54b7a0ee84959abd847a219be3f0771f6 | Triage

Sharing

General

Target

1a66883e197b07a279cc71e3aa581702_JaffaCakes118
Size

15KB
Sample

240329-gqqqjabh67
MD5

1a66883e197b07a279cc71e3aa581702
SHA1

c0ff3eb7efc04e621749223909ca31663604adb7
SHA256

4e4010c3961d59d5236bd596364f21f54b7a0ee84959abd847a219be3f0771f6
SHA512

e55e9a3248207f3f8bcdaabc48d57023c963883beea5354dba6a8bf718812c614871b12f6f0ab3c1aacc89f84fa7205da7ded0ecd278dfe3b7e7941834fa3809
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5X/EmW:hDXWipuE+K3/SSHgxm5sX

Score

7^/10

Malware Config

Targets

- Target
  
  1a66883e197b07a279cc71e3aa581702_JaffaCakes118
- Size
  
  15KB
- MD5
  
  1a66883e197b07a279cc71e3aa581702
- SHA1
  
  c0ff3eb7efc04e621749223909ca31663604adb7
- SHA256
  
  4e4010c3961d59d5236bd596364f21f54b7a0ee84959abd847a219be3f0771f6
- SHA512
  
  e55e9a3248207f3f8bcdaabc48d57023c963883beea5354dba6a8bf718812c614871b12f6f0ab3c1aacc89f84fa7205da7ded0ecd278dfe3b7e7941834fa3809
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5X/EmW:hDXWipuE+K3/SSHgxm5sX
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2