2d91a4b569b5ca0757bda916b0e52e57977b6040e3fb4d0b6183d034c679d087 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dba79f311e91f8afdf3625ff86f7ecc0_JaffaCakes118
Size

14KB
Sample

240406-ffgjfabf78
MD5

dba79f311e91f8afdf3625ff86f7ecc0
SHA1

3ab206745da9f56eb57fe6f04aa4bc4b8649e8d4
SHA256

2d91a4b569b5ca0757bda916b0e52e57977b6040e3fb4d0b6183d034c679d087
SHA512

a090100305cc3227fb81ac799d05573805563e8bab9a02948e803cbe243f4a9c872af6af037c68842c39ece3f3efe25579909b0171d9dbaf6191a2f135ea6d86
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYDspLX:hDXWipuE+K3/SSHgxmgR

Score

7^/10

Malware Config

Targets

- Target
  
  dba79f311e91f8afdf3625ff86f7ecc0_JaffaCakes118
- Size
  
  14KB
- MD5
  
  dba79f311e91f8afdf3625ff86f7ecc0
- SHA1
  
  3ab206745da9f56eb57fe6f04aa4bc4b8649e8d4
- SHA256
  
  2d91a4b569b5ca0757bda916b0e52e57977b6040e3fb4d0b6183d034c679d087
- SHA512
  
  a090100305cc3227fb81ac799d05573805563e8bab9a02948e803cbe243f4a9c872af6af037c68842c39ece3f3efe25579909b0171d9dbaf6191a2f135ea6d86
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYDspLX:hDXWipuE+K3/SSHgxmgR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2