2b3345178159dc3c7542ea9e146d5c747c4d6f6fd21239dfa65add0a16556e40 | Triage

Sharing

General

Target

e198e87970a4a2616d9b000b9af2d6cc_JaffaCakes118
Size

20KB
Sample

240406-lnqd7sfd7t
MD5

e198e87970a4a2616d9b000b9af2d6cc
SHA1

ff0c0c4974e4c5a81df02d42bd85e787b1f81d67
SHA256

2b3345178159dc3c7542ea9e146d5c747c4d6f6fd21239dfa65add0a16556e40
SHA512

120dee20c52314b6d6f2e6eaefb739aadefc711a0ef36de29a74eead1a49623efdfc8e7d1a4ee4495ea927693314ca13bce325bee38e5ff04478fb03690e2885
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4A:hDXWipuE+K3/SSHgxmHZA

Score

7^/10

Malware Config

Targets

- Target
  
  e198e87970a4a2616d9b000b9af2d6cc_JaffaCakes118
- Size
  
  20KB
- MD5
  
  e198e87970a4a2616d9b000b9af2d6cc
- SHA1
  
  ff0c0c4974e4c5a81df02d42bd85e787b1f81d67
- SHA256
  
  2b3345178159dc3c7542ea9e146d5c747c4d6f6fd21239dfa65add0a16556e40
- SHA512
  
  120dee20c52314b6d6f2e6eaefb739aadefc711a0ef36de29a74eead1a49623efdfc8e7d1a4ee4495ea927693314ca13bce325bee38e5ff04478fb03690e2885
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4A:hDXWipuE+K3/SSHgxmHZA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2