78fac31cf70f114baec8ec3578022194bb569de81f506c66d01b32fa1c4562fc | Triage

Sharing

General

Target

2536d9c0c646bf6060f7a2d1cfe18e0e_JaffaCakes118
Size

4.2MB
Sample

240329-sg1pxsbf42
MD5

2536d9c0c646bf6060f7a2d1cfe18e0e
SHA1

a732f010fc3b715da6375fb68d7598d86eb2248a
SHA256

78fac31cf70f114baec8ec3578022194bb569de81f506c66d01b32fa1c4562fc
SHA512

6e99966e8f7074b1015f469a6feff29576becddb58a2e8fbe17a520f46391f93a2b0618056c1dc92518bab9304795d7868bd980895a11116de19aef24111a9a3
SSDEEP

98304:oXB4uluJRmMg6QWlIpgi0rHqsih/mCqJ4B4uluq:ovsJR0TW6yiIKRhzqOsq

Score

7^/10

Malware Config

Targets

- Target
  
  2536d9c0c646bf6060f7a2d1cfe18e0e_JaffaCakes118
- Size
  
  4.2MB
- MD5
  
  2536d9c0c646bf6060f7a2d1cfe18e0e
- SHA1
  
  a732f010fc3b715da6375fb68d7598d86eb2248a
- SHA256
  
  78fac31cf70f114baec8ec3578022194bb569de81f506c66d01b32fa1c4562fc
- SHA512
  
  6e99966e8f7074b1015f469a6feff29576becddb58a2e8fbe17a520f46391f93a2b0618056c1dc92518bab9304795d7868bd980895a11116de19aef24111a9a3
- SSDEEP
  
  98304:oXB4uluJRmMg6QWlIpgi0rHqsih/mCqJ4B4uluq:ovsJR0TW6yiIKRhzqOsq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2