a1ed9a7f00adb679311f80ea29f3496af9e1982a7fc5215f1d905229ec773e82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da850b7679920442ef3192c6f6874343_JaffaCakes118
Size

14KB
Sample

240405-wbxymaag43
MD5

da850b7679920442ef3192c6f6874343
SHA1

aca8750c681cee78f9be95b09892f5b169a32c02
SHA256

a1ed9a7f00adb679311f80ea29f3496af9e1982a7fc5215f1d905229ec773e82
SHA512

c9c8aad3d0163ab992ed4595e66b91e66b3b54580973e728301d783f52c226c1709368dd4d2b6c115a54560790668be543887816a789526dd696368769e424e5
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0z:hDXWipuE+K3/SSHgx4z

Score

7^/10

Malware Config

Targets

- Target
  
  da850b7679920442ef3192c6f6874343_JaffaCakes118
- Size
  
  14KB
- MD5
  
  da850b7679920442ef3192c6f6874343
- SHA1
  
  aca8750c681cee78f9be95b09892f5b169a32c02
- SHA256
  
  a1ed9a7f00adb679311f80ea29f3496af9e1982a7fc5215f1d905229ec773e82
- SHA512
  
  c9c8aad3d0163ab992ed4595e66b91e66b3b54580973e728301d783f52c226c1709368dd4d2b6c115a54560790668be543887816a789526dd696368769e424e5
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0z:hDXWipuE+K3/SSHgx4z
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2