996a0ccb8ec661c62c9b95ce9d1dda53d50a2a921119b68178597f12fdac72f2 | Triage

Sharing

General

Target

cbe944dd6dda97d035dab00e6c81edaa_JaffaCakes118
Size

15KB
Sample

240405-f1gd6sdd76
MD5

cbe944dd6dda97d035dab00e6c81edaa
SHA1

c58c98416747bb06fbe7bf9eb8d43dba662b386a
SHA256

996a0ccb8ec661c62c9b95ce9d1dda53d50a2a921119b68178597f12fdac72f2
SHA512

c9fc5915afdafe2a013bf0bc76aa800b2a6fd35d40f9157ceebef770871db529106ab24eeced480ca43d7af5382129ed59936313ae86e31e19421774eb47697d
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyh6F:hDXWipuE+K3/SSHgxmyh6F

Score

7^/10

Malware Config

Targets

- Target
  
  cbe944dd6dda97d035dab00e6c81edaa_JaffaCakes118
- Size
  
  15KB
- MD5
  
  cbe944dd6dda97d035dab00e6c81edaa
- SHA1
  
  c58c98416747bb06fbe7bf9eb8d43dba662b386a
- SHA256
  
  996a0ccb8ec661c62c9b95ce9d1dda53d50a2a921119b68178597f12fdac72f2
- SHA512
  
  c9fc5915afdafe2a013bf0bc76aa800b2a6fd35d40f9157ceebef770871db529106ab24eeced480ca43d7af5382129ed59936313ae86e31e19421774eb47697d
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyh6F:hDXWipuE+K3/SSHgxmyh6F
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2