3e0ee1045ce79cf30eba0919b69f9eaf4152073dbeee4f6971100c31519974d3 | Triage

Sharing

General

Target

c3afb352a070c28674b4afa49e946e13_JaffaCakes118
Size

16KB
Sample

240404-2mwgtscc8t
MD5

c3afb352a070c28674b4afa49e946e13
SHA1

4c0a1c2b09f1ade3ada23756acc3311ee269fc8c
SHA256

3e0ee1045ce79cf30eba0919b69f9eaf4152073dbeee4f6971100c31519974d3
SHA512

4617ceadf27fbc63c760fa0dc026198cd17c9d3f9b6952ca642641de65736dc6e8be2d39597e122d666657ab08fc1f00f9e3c65aa8b499020ca50e22f98a3ab7
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlj:hDXWipuE+K3/SSHgxmlj

Score

7^/10

Malware Config

Targets

- Target
  
  c3afb352a070c28674b4afa49e946e13_JaffaCakes118
- Size
  
  16KB
- MD5
  
  c3afb352a070c28674b4afa49e946e13
- SHA1
  
  4c0a1c2b09f1ade3ada23756acc3311ee269fc8c
- SHA256
  
  3e0ee1045ce79cf30eba0919b69f9eaf4152073dbeee4f6971100c31519974d3
- SHA512
  
  4617ceadf27fbc63c760fa0dc026198cd17c9d3f9b6952ca642641de65736dc6e8be2d39597e122d666657ab08fc1f00f9e3c65aa8b499020ca50e22f98a3ab7
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlj:hDXWipuE+K3/SSHgxmlj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2