5820ab1637c7a68693e24b710f84dfe2b4e575fccd67a0f04ee8a43fb150bcc4 | Triage

Sharing

General

Target

dc87015f80636a6cd7259697680e2b38_JaffaCakes118
Size

16KB
Sample

240406-f9zl4sbg7v
MD5

dc87015f80636a6cd7259697680e2b38
SHA1

d58507c85d7c6c8ef94412342b4cdcf24fddceab
SHA256

5820ab1637c7a68693e24b710f84dfe2b4e575fccd67a0f04ee8a43fb150bcc4
SHA512

e85d2ca09b646b17bc15785a1ca1a404f26e6601272b9751192c53daeb4b7ab1e926bec6d7d7f1c92214779d7f864ffcaee8c469a794babeffd5de8a3b14eb98
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYHzd6L:hDXWipuE+K3/SSHgxmHZ2

Score

7^/10

Malware Config

Targets

- Target
  
  dc87015f80636a6cd7259697680e2b38_JaffaCakes118
- Size
  
  16KB
- MD5
  
  dc87015f80636a6cd7259697680e2b38
- SHA1
  
  d58507c85d7c6c8ef94412342b4cdcf24fddceab
- SHA256
  
  5820ab1637c7a68693e24b710f84dfe2b4e575fccd67a0f04ee8a43fb150bcc4
- SHA512
  
  e85d2ca09b646b17bc15785a1ca1a404f26e6601272b9751192c53daeb4b7ab1e926bec6d7d7f1c92214779d7f864ffcaee8c469a794babeffd5de8a3b14eb98
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYHzd6L:hDXWipuE+K3/SSHgxmHZ2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2