f65441662abc949d200863f5b34c796006a263d9a73a4142c0e58bd794818740 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2bba46c4b0834652cfc7a91fecac59f_JaffaCakes118
Size

16KB
Sample

240405-ns37zabd33
MD5

d2bba46c4b0834652cfc7a91fecac59f
SHA1

1b00ba5b06966b84ece5ab1279832a9750f3ae46
SHA256

f65441662abc949d200863f5b34c796006a263d9a73a4142c0e58bd794818740
SHA512

9e1b848e4bdd90e4073fc70c72764492e5f602370e5d0cb09a0cc059464516841e130fa6df52e2ff6996880cda11b1f1d2b4ac00e7b46c25710b3b3e229323ac
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hKSY:hDXWipuE+K3/SSHgxm3SY

Score

7^/10

Malware Config

Targets

- Target
  
  d2bba46c4b0834652cfc7a91fecac59f_JaffaCakes118
- Size
  
  16KB
- MD5
  
  d2bba46c4b0834652cfc7a91fecac59f
- SHA1
  
  1b00ba5b06966b84ece5ab1279832a9750f3ae46
- SHA256
  
  f65441662abc949d200863f5b34c796006a263d9a73a4142c0e58bd794818740
- SHA512
  
  9e1b848e4bdd90e4073fc70c72764492e5f602370e5d0cb09a0cc059464516841e130fa6df52e2ff6996880cda11b1f1d2b4ac00e7b46c25710b3b3e229323ac
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hKSY:hDXWipuE+K3/SSHgxm3SY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2