a8b5f70af7c99dd506c3b77a1c7495ef24d3c8e7946ce2aa1288bd6902e024c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e84bd538bedd4c96b5e4de5ff94066bb_JaffaCakes118
Size

16KB
Sample

240408-yspdxsdf9z
MD5

e84bd538bedd4c96b5e4de5ff94066bb
SHA1

18596dd0d77102c339cbd7e8a9df76420025f4fb
SHA256

a8b5f70af7c99dd506c3b77a1c7495ef24d3c8e7946ce2aa1288bd6902e024c0
SHA512

859d06d22cdc44a79c656a4c91aa87a68d0196d0c4ef32314a1a20adfe2d34ce80a3d64f4441f21f41eeaeaca68ba52d94cd083911da170febfa922187a17048
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYHzP:hDXWipuE+K3/SSHgxmHz

Score

7^/10

Malware Config

Targets

- Target
  
  e84bd538bedd4c96b5e4de5ff94066bb_JaffaCakes118
- Size
  
  16KB
- MD5
  
  e84bd538bedd4c96b5e4de5ff94066bb
- SHA1
  
  18596dd0d77102c339cbd7e8a9df76420025f4fb
- SHA256
  
  a8b5f70af7c99dd506c3b77a1c7495ef24d3c8e7946ce2aa1288bd6902e024c0
- SHA512
  
  859d06d22cdc44a79c656a4c91aa87a68d0196d0c4ef32314a1a20adfe2d34ce80a3d64f4441f21f41eeaeaca68ba52d94cd083911da170febfa922187a17048
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYHzP:hDXWipuE+K3/SSHgxmHz
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2