2e3e38fb28abd9c0feba878f3021f6a045bdd855eabfacf1eee3c3788b6fbe71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f7cf0fae6da981e46f5029451e9b66a_JaffaCakes118
Size

20KB
Sample

240329-mdmq1aef8w
MD5

1f7cf0fae6da981e46f5029451e9b66a
SHA1

871396454f11f4ca8cd750c54f77678bb9ca3fee
SHA256

2e3e38fb28abd9c0feba878f3021f6a045bdd855eabfacf1eee3c3788b6fbe71
SHA512

28bad460406eca52092782d8ce9a777ccae55cb5d81a117c5169e3ec6571fb7e891cd865a8ea30ae7d65bd45139df648cdd27fa7ee875d47e13baf38dc856f11
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PSRy:hDXWipuE+K3/SSHgxmHZPSRy

Score

7^/10

Malware Config

Targets

- Target
  
  1f7cf0fae6da981e46f5029451e9b66a_JaffaCakes118
- Size
  
  20KB
- MD5
  
  1f7cf0fae6da981e46f5029451e9b66a
- SHA1
  
  871396454f11f4ca8cd750c54f77678bb9ca3fee
- SHA256
  
  2e3e38fb28abd9c0feba878f3021f6a045bdd855eabfacf1eee3c3788b6fbe71
- SHA512
  
  28bad460406eca52092782d8ce9a777ccae55cb5d81a117c5169e3ec6571fb7e891cd865a8ea30ae7d65bd45139df648cdd27fa7ee875d47e13baf38dc856f11
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PSRy:hDXWipuE+K3/SSHgxmHZPSRy
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2