c3e31f5882bbcb632d18ec1f59d7f04858e3178bdb4885fbf79e2d8c1deb2743 | Triage

Sharing

General

Target

cf72aac49d80d49c2007b5b0c25b1c63_JaffaCakes118
Size

20KB
Sample

240405-k3nngsga9t
MD5

cf72aac49d80d49c2007b5b0c25b1c63
SHA1

043302305055bea72fec2b327140ce4656ebc508
SHA256

c3e31f5882bbcb632d18ec1f59d7f04858e3178bdb4885fbf79e2d8c1deb2743
SHA512

da75b154854d1eabbb1c85e557b767895fb1ed5c2a9b05c84517284787ab5593c1e288b162ad787f430bb1cd4e52d20cc82dfaf136f700b0ae6a48c46b95880b
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PST:hDXWipuE+K3/SSHgxmHZPST

Score

7^/10

Malware Config

Targets

- Target
  
  cf72aac49d80d49c2007b5b0c25b1c63_JaffaCakes118
- Size
  
  20KB
- MD5
  
  cf72aac49d80d49c2007b5b0c25b1c63
- SHA1
  
  043302305055bea72fec2b327140ce4656ebc508
- SHA256
  
  c3e31f5882bbcb632d18ec1f59d7f04858e3178bdb4885fbf79e2d8c1deb2743
- SHA512
  
  da75b154854d1eabbb1c85e557b767895fb1ed5c2a9b05c84517284787ab5593c1e288b162ad787f430bb1cd4e52d20cc82dfaf136f700b0ae6a48c46b95880b
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PST:hDXWipuE+K3/SSHgxmHZPST
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2