426b9db04c4332e0bc7c9b0e3f4096980680b9b5911ad6d8b5240b82bdb1eafc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9956f56bced23f41a0fc56268309f15_JaffaCakes118
Size

20KB
Sample

240409-khhxhaag59
MD5

e9956f56bced23f41a0fc56268309f15
SHA1

a4fadb7a8c7baf179a79ab253d78c1f94cab2185
SHA256

426b9db04c4332e0bc7c9b0e3f4096980680b9b5911ad6d8b5240b82bdb1eafc
SHA512

90cf65d2dad6229f8cb3d4521d2af3b7f27527b955a583177a1775bd417cfa97cdede26a48a6e132044c450b3586a9f67e96d44eeb5921623ae3a127fe484e79
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4P8Uzy:hDXWipuE+K3/SSHgxmHZPk

Score

7^/10

Malware Config

Targets

- Target
  
  e9956f56bced23f41a0fc56268309f15_JaffaCakes118
- Size
  
  20KB
- MD5
  
  e9956f56bced23f41a0fc56268309f15
- SHA1
  
  a4fadb7a8c7baf179a79ab253d78c1f94cab2185
- SHA256
  
  426b9db04c4332e0bc7c9b0e3f4096980680b9b5911ad6d8b5240b82bdb1eafc
- SHA512
  
  90cf65d2dad6229f8cb3d4521d2af3b7f27527b955a583177a1775bd417cfa97cdede26a48a6e132044c450b3586a9f67e96d44eeb5921623ae3a127fe484e79
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4P8Uzy:hDXWipuE+K3/SSHgxmHZPk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2