067e2fa8d83c87959e8b99bbe246bd2867172faa2807b05d119e71e7d954d79b | Triage

Sharing

General

Target

e931a7648532915c19b2c953496fdbf7_JaffaCakes118
Size

14KB
Sample

240409-esjc5aec96
MD5

e931a7648532915c19b2c953496fdbf7
SHA1

0f90cd101d31f8258338232e4a4183cf3c78c821
SHA256

067e2fa8d83c87959e8b99bbe246bd2867172faa2807b05d119e71e7d954d79b
SHA512

ed13d52acd14f3bae9e29b888cb46e0073110c0bbf7202fe6c26d4ea2ed26fbeb90a52878279e276ae87e9f58853aa708f5be480a436e665567b89667f6597d9
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZXdHHukP:hDXWipuE+K3/SSHgx3NHHnP

Score

7^/10

Malware Config

Targets

- Target
  
  e931a7648532915c19b2c953496fdbf7_JaffaCakes118
- Size
  
  14KB
- MD5
  
  e931a7648532915c19b2c953496fdbf7
- SHA1
  
  0f90cd101d31f8258338232e4a4183cf3c78c821
- SHA256
  
  067e2fa8d83c87959e8b99bbe246bd2867172faa2807b05d119e71e7d954d79b
- SHA512
  
  ed13d52acd14f3bae9e29b888cb46e0073110c0bbf7202fe6c26d4ea2ed26fbeb90a52878279e276ae87e9f58853aa708f5be480a436e665567b89667f6597d9
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZXdHHukP:hDXWipuE+K3/SSHgx3NHHnP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2