75b58be8468d76e07dbff00fb6e7fa2076d8a463e0d5c17f2b32e4adf27cd564 | Triage

Sharing

General

Target

1a80aaa6c3c80385c374e695fa869639_JaffaCakes118
Size

16KB
Sample

240329-gt6adsca27
MD5

1a80aaa6c3c80385c374e695fa869639
SHA1

ca7570775d500882264b3f247bc892efd33a9ced
SHA256

75b58be8468d76e07dbff00fb6e7fa2076d8a463e0d5c17f2b32e4adf27cd564
SHA512

5a9afb8ebc33dfa63b9538c17319001a1db993f38649705c1e0b02943884293e96c5d855fd36d193ba6dd82152a02457913c7fa1a1757b07632b6b995436e25f
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5ON:hDXWipuE+K3/SSHgxmIN

Score

7^/10

Malware Config

Targets

- Target
  
  1a80aaa6c3c80385c374e695fa869639_JaffaCakes118
- Size
  
  16KB
- MD5
  
  1a80aaa6c3c80385c374e695fa869639
- SHA1
  
  ca7570775d500882264b3f247bc892efd33a9ced
- SHA256
  
  75b58be8468d76e07dbff00fb6e7fa2076d8a463e0d5c17f2b32e4adf27cd564
- SHA512
  
  5a9afb8ebc33dfa63b9538c17319001a1db993f38649705c1e0b02943884293e96c5d855fd36d193ba6dd82152a02457913c7fa1a1757b07632b6b995436e25f
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5ON:hDXWipuE+K3/SSHgxmIN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2