d3dbeb49f0b8670efcbc8acc6f22b6ea7bd92e975db578846381937e8a8f4bbd | Triage

Sharing

General

Target

ce9081b49b95b1f03e06de44d8ee59e1_JaffaCakes118
Size

15KB
Sample

240405-kcvdcafg97
MD5

ce9081b49b95b1f03e06de44d8ee59e1
SHA1

fff5c76e1d8c577cb17996a52aef2c1d255ae828
SHA256

d3dbeb49f0b8670efcbc8acc6f22b6ea7bd92e975db578846381937e8a8f4bbd
SHA512

0158b25f5c969657e5bed16262bc4c638caca00ef0e6affc4f4e7d3619c5e4b53fec99767ad87bbd3d2c1e618ab0f86db48c167b008a4f5049360630bc8739d4
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh4cnp:hDXWipuE+K3/SSHgx/p

Score

7^/10

Malware Config

Targets

- Target
  
  ce9081b49b95b1f03e06de44d8ee59e1_JaffaCakes118
- Size
  
  15KB
- MD5
  
  ce9081b49b95b1f03e06de44d8ee59e1
- SHA1
  
  fff5c76e1d8c577cb17996a52aef2c1d255ae828
- SHA256
  
  d3dbeb49f0b8670efcbc8acc6f22b6ea7bd92e975db578846381937e8a8f4bbd
- SHA512
  
  0158b25f5c969657e5bed16262bc4c638caca00ef0e6affc4f4e7d3619c5e4b53fec99767ad87bbd3d2c1e618ab0f86db48c167b008a4f5049360630bc8739d4
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh4cnp:hDXWipuE+K3/SSHgx/p
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2