a56235728ba2871b53b27ea41139b183c4a5d11a76f3187beaca63730df5b560 | Triage

Sharing

General

Target

d68c702351756d970a4f81c64823fd4b_JaffaCakes118
Size

15KB
Sample

240405-rz18qsef2t
MD5

d68c702351756d970a4f81c64823fd4b
SHA1

f42d712a0a5e05209462fc7ce0f4eb8e250d8f6e
SHA256

a56235728ba2871b53b27ea41139b183c4a5d11a76f3187beaca63730df5b560
SHA512

cdae8b5720d96b1d2c3f7f0146f06c97cca1bc18f3d53aabd4ba4260727071a24016f9dc9d2badd9fe7c67e175ac666f165b2b12561386dd33baf6abc1f02f7c
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJdS:hDXWipuE+K3/SSHgxhS

Score

7^/10

Malware Config

Targets

- Target
  
  d68c702351756d970a4f81c64823fd4b_JaffaCakes118
- Size
  
  15KB
- MD5
  
  d68c702351756d970a4f81c64823fd4b
- SHA1
  
  f42d712a0a5e05209462fc7ce0f4eb8e250d8f6e
- SHA256
  
  a56235728ba2871b53b27ea41139b183c4a5d11a76f3187beaca63730df5b560
- SHA512
  
  cdae8b5720d96b1d2c3f7f0146f06c97cca1bc18f3d53aabd4ba4260727071a24016f9dc9d2badd9fe7c67e175ac666f165b2b12561386dd33baf6abc1f02f7c
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJdS:hDXWipuE+K3/SSHgxhS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2