45b0a67ca1187808310dc06a50c344bb9d292bcc313b78d357384fe764cd2451 | Triage

Sharing

General

Target

29bc7ef7be718035ebfb32c18389e45b_JaffaCakes118
Size

16KB
Sample

240329-w913yafa6v
MD5

29bc7ef7be718035ebfb32c18389e45b
SHA1

1cd47a044006a68d9b0b1fc9c91a23e75f9bb173
SHA256

45b0a67ca1187808310dc06a50c344bb9d292bcc313b78d357384fe764cd2451
SHA512

194b25f70b68ba3972f1ed7f4cf227e33d2ea35a796b6a49035e67f9b837e1719aa60bad21659624561da79f446d26d75f12bec61b482a02150d67c4654b61e5
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYr:hDXWipuE+K3/SSHgxmr

Score

7^/10

Malware Config

Targets

- Target
  
  29bc7ef7be718035ebfb32c18389e45b_JaffaCakes118
- Size
  
  16KB
- MD5
  
  29bc7ef7be718035ebfb32c18389e45b
- SHA1
  
  1cd47a044006a68d9b0b1fc9c91a23e75f9bb173
- SHA256
  
  45b0a67ca1187808310dc06a50c344bb9d292bcc313b78d357384fe764cd2451
- SHA512
  
  194b25f70b68ba3972f1ed7f4cf227e33d2ea35a796b6a49035e67f9b837e1719aa60bad21659624561da79f446d26d75f12bec61b482a02150d67c4654b61e5
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYr:hDXWipuE+K3/SSHgxmr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2