9065b0349f793250a77145d20553fb794265aac51342e99544bf45d268ef8da9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc20422a3298f3bf2a307f0112ada110_JaffaCakes118
Size

16KB
Sample

240406-fwqr2scc36
MD5

dc20422a3298f3bf2a307f0112ada110
SHA1

3c304be863372b425e64443dad365ede9e1b1275
SHA256

9065b0349f793250a77145d20553fb794265aac51342e99544bf45d268ef8da9
SHA512

e7207a832ca2380d3c8d672adbf4ea3d4a7ccf2654920290cead9191dce10d59fcc568641ae16c88a0ba0fa93561de8e1fb0399bea0817d4eaace14419f447c3
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZlHfj:hDXWipuE+K3/SSHgx3l/j

Score

7^/10

Malware Config

Targets

- Target
  
  dc20422a3298f3bf2a307f0112ada110_JaffaCakes118
- Size
  
  16KB
- MD5
  
  dc20422a3298f3bf2a307f0112ada110
- SHA1
  
  3c304be863372b425e64443dad365ede9e1b1275
- SHA256
  
  9065b0349f793250a77145d20553fb794265aac51342e99544bf45d268ef8da9
- SHA512
  
  e7207a832ca2380d3c8d672adbf4ea3d4a7ccf2654920290cead9191dce10d59fcc568641ae16c88a0ba0fa93561de8e1fb0399bea0817d4eaace14419f447c3
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZlHfj:hDXWipuE+K3/SSHgx3l/j
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2