c8bb87265246115782284ea649d91abd0189510f45df49df27db008608c4c38b | Triage

Sharing

General

Target

26d528273d64f31a01d7e5c996aed784_JaffaCakes118
Size

16KB
Sample

240329-twdpdach75
MD5

26d528273d64f31a01d7e5c996aed784
SHA1

9c0e21824542d0c424d140e287d7081d0b09c5a0
SHA256

c8bb87265246115782284ea649d91abd0189510f45df49df27db008608c4c38b
SHA512

a43294b2ca23815039e2c448c253bc86b012bdcad7ee5257a3c28799459bf99236b799b543cb652b4800de2872da0bb46c1eb756dfad0b43db62729d96026dd8
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxt2F:hDXWipuE+K3/SSHgxmHDU

Score

7^/10

Malware Config

Targets

- Target
  
  26d528273d64f31a01d7e5c996aed784_JaffaCakes118
- Size
  
  16KB
- MD5
  
  26d528273d64f31a01d7e5c996aed784
- SHA1
  
  9c0e21824542d0c424d140e287d7081d0b09c5a0
- SHA256
  
  c8bb87265246115782284ea649d91abd0189510f45df49df27db008608c4c38b
- SHA512
  
  a43294b2ca23815039e2c448c253bc86b012bdcad7ee5257a3c28799459bf99236b799b543cb652b4800de2872da0bb46c1eb756dfad0b43db62729d96026dd8
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxt2F:hDXWipuE+K3/SSHgxmHDU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2