c93d5e4c25a82b6054b2bcdf4a75e13b469e2daa1c2a89b67a1c626e3d5b778a | Triage

Sharing

General

Target

e7ab7dd100c12428964355f4328351ac_JaffaCakes118
Size

14KB
Sample

240408-rsf9zsef5x
MD5

e7ab7dd100c12428964355f4328351ac
SHA1

6c25d81500c8a6660a5dd43dff8a12fee92d095b
SHA256

c93d5e4c25a82b6054b2bcdf4a75e13b469e2daa1c2a89b67a1c626e3d5b778a
SHA512

f95de35e76242146b860f385badf15c1b7b4871f7fb22355f1a7e3f8f7d1cd8f1b15d019099f8a7fe8f977c1217f731e0ce7971987e768238e8e49543961fbd2
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhh7Ic:hDXWipuE+K3/SSHgxz8c

Score

7^/10

Malware Config

Targets

- Target
  
  e7ab7dd100c12428964355f4328351ac_JaffaCakes118
- Size
  
  14KB
- MD5
  
  e7ab7dd100c12428964355f4328351ac
- SHA1
  
  6c25d81500c8a6660a5dd43dff8a12fee92d095b
- SHA256
  
  c93d5e4c25a82b6054b2bcdf4a75e13b469e2daa1c2a89b67a1c626e3d5b778a
- SHA512
  
  f95de35e76242146b860f385badf15c1b7b4871f7fb22355f1a7e3f8f7d1cd8f1b15d019099f8a7fe8f977c1217f731e0ce7971987e768238e8e49543961fbd2
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhh7Ic:hDXWipuE+K3/SSHgxz8c
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2