5a542e621f1fa3e219cb70bacaf3e376dc592344b97bda3fe1e82a3a9c59e52e | Triage

Sharing

General

Target

dbf4a2b38996ff3b5aded7751ccfc887_JaffaCakes118
Size

14KB
Sample

240406-fqd63aca84
MD5

dbf4a2b38996ff3b5aded7751ccfc887
SHA1

3f5a55079cccde72029dcb5fdd6650afe08dd1e8
SHA256

5a542e621f1fa3e219cb70bacaf3e376dc592344b97bda3fe1e82a3a9c59e52e
SHA512

40b3cd581b94eaf0c464f1134f18a323632333f8781e3a1d22382438e172bae2cf2a698a2853fbeadb3ce0ca26409e5342b32411f95c3190c1949fef7ac401ed
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhDv:hDXWipuE+K3/SSHgx9

Score

7^/10

Malware Config

Targets

- Target
  
  dbf4a2b38996ff3b5aded7751ccfc887_JaffaCakes118
- Size
  
  14KB
- MD5
  
  dbf4a2b38996ff3b5aded7751ccfc887
- SHA1
  
  3f5a55079cccde72029dcb5fdd6650afe08dd1e8
- SHA256
  
  5a542e621f1fa3e219cb70bacaf3e376dc592344b97bda3fe1e82a3a9c59e52e
- SHA512
  
  40b3cd581b94eaf0c464f1134f18a323632333f8781e3a1d22382438e172bae2cf2a698a2853fbeadb3ce0ca26409e5342b32411f95c3190c1949fef7ac401ed
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhDv:hDXWipuE+K3/SSHgx9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2