9550ce592aadecdb349713bdaeb17efa158ab731193ca244d1a9c165c3976b7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd617fd7c3124436df22e5658061e6de_JaffaCakes118
Size

100KB
Sample

240406-g2sdhadb48
MD5

dd617fd7c3124436df22e5658061e6de
SHA1

8e27aeb02bb1525413c1bd0b27b9e38d2bc873d1
SHA256

9550ce592aadecdb349713bdaeb17efa158ab731193ca244d1a9c165c3976b7c
SHA512

e054a8edd7b44de76dc97fa4a0aacd7c4693f58da8d31876d40baa574e1b3c9dd348484feacb2bc03d334f0c943c312de55d9a96fb948a2448870ecd4916fc6a
SSDEEP

1536:ZGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+lJ:Z5MaVVnLA0WLM0Uvh6kd+lJ

Score

7^/10

Malware Config

Targets

- Target
  
  dd617fd7c3124436df22e5658061e6de_JaffaCakes118
- Size
  
  100KB
- MD5
  
  dd617fd7c3124436df22e5658061e6de
- SHA1
  
  8e27aeb02bb1525413c1bd0b27b9e38d2bc873d1
- SHA256
  
  9550ce592aadecdb349713bdaeb17efa158ab731193ca244d1a9c165c3976b7c
- SHA512
  
  e054a8edd7b44de76dc97fa4a0aacd7c4693f58da8d31876d40baa574e1b3c9dd348484feacb2bc03d334f0c943c312de55d9a96fb948a2448870ecd4916fc6a
- SSDEEP
  
  1536:ZGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+lJ:Z5MaVVnLA0WLM0Uvh6kd+lJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2