cbace9f33b086d4641e861fbca302f8d9910460544557df3a3949f7cce42cc30 | Triage

Sharing

General

Target

bda80320c85965ff500bd4ecc5a9d316_JaffaCakes118
Size

16KB
Sample

240404-vfy6tadf62
MD5

bda80320c85965ff500bd4ecc5a9d316
SHA1

974162251adec55888eececf0ceea2e4556fad6f
SHA256

cbace9f33b086d4641e861fbca302f8d9910460544557df3a3949f7cce42cc30
SHA512

fca39e67e38518285d72846159ce25412117d43acf586b4d597716118f0a37c484c9bb188b6e15179ce6c11a5d4b644b12a7761bfb22306b7208c09f51b30319
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYTW:hDXWipuE+K3/SSHgxma

Score

7^/10

Malware Config

Targets

- Target
  
  bda80320c85965ff500bd4ecc5a9d316_JaffaCakes118
- Size
  
  16KB
- MD5
  
  bda80320c85965ff500bd4ecc5a9d316
- SHA1
  
  974162251adec55888eececf0ceea2e4556fad6f
- SHA256
  
  cbace9f33b086d4641e861fbca302f8d9910460544557df3a3949f7cce42cc30
- SHA512
  
  fca39e67e38518285d72846159ce25412117d43acf586b4d597716118f0a37c484c9bb188b6e15179ce6c11a5d4b644b12a7761bfb22306b7208c09f51b30319
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYTW:hDXWipuE+K3/SSHgxma
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2