96f7989358d3b37da30f4ce1837a2423dc9c795abaef6d76e7ef3ddcca3e3567 | Triage

Sharing

General

Target

27fd7f5eb2fbb96affd0d9bf2af25a8a_JaffaCakes118
Size

16KB
Sample

240329-vtqrladd2w
MD5

27fd7f5eb2fbb96affd0d9bf2af25a8a
SHA1

729db1a975d70a27d30bcff48356780685e340d6
SHA256

96f7989358d3b37da30f4ce1837a2423dc9c795abaef6d76e7ef3ddcca3e3567
SHA512

d4045c38a713ba8f40aeb9f7513252788ce6865f6e3cb75d996923f086f17c706b60d4522883be00e3bd8aebc4b66953818d5acf39a7c37a148cda5aa8244c79
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhjn:hDXWipuE+K3/SSHgx9

Score

7^/10

Malware Config

Targets

- Target
  
  27fd7f5eb2fbb96affd0d9bf2af25a8a_JaffaCakes118
- Size
  
  16KB
- MD5
  
  27fd7f5eb2fbb96affd0d9bf2af25a8a
- SHA1
  
  729db1a975d70a27d30bcff48356780685e340d6
- SHA256
  
  96f7989358d3b37da30f4ce1837a2423dc9c795abaef6d76e7ef3ddcca3e3567
- SHA512
  
  d4045c38a713ba8f40aeb9f7513252788ce6865f6e3cb75d996923f086f17c706b60d4522883be00e3bd8aebc4b66953818d5acf39a7c37a148cda5aa8244c79
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhjn:hDXWipuE+K3/SSHgx9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2