8262a3a276e560c1ae8a61b23b3141d2ba25d2b400f6788fed585303cf8508ec | Triage

Sharing

General

Target

eab90748e530303b6e27a7fc2c72ac38_JaffaCakes118
Size

14KB
Sample

240410-k249vaab32
MD5

eab90748e530303b6e27a7fc2c72ac38
SHA1

986dba8dacb655abdaab1bfd23846a7e758550d8
SHA256

8262a3a276e560c1ae8a61b23b3141d2ba25d2b400f6788fed585303cf8508ec
SHA512

1ce988d85b248fc16c79af9b983fa279435792ff51da24cd2b5ec0c09bcd67518d8517a07fa24a63bf550fad6456e219300aa764031d1f10c2c703c38bfa8b19
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh5RWnx:hDXWipuE+K3/SSHgxkx

Score

7^/10

Malware Config

Targets

- Target
  
  eab90748e530303b6e27a7fc2c72ac38_JaffaCakes118
- Size
  
  14KB
- MD5
  
  eab90748e530303b6e27a7fc2c72ac38
- SHA1
  
  986dba8dacb655abdaab1bfd23846a7e758550d8
- SHA256
  
  8262a3a276e560c1ae8a61b23b3141d2ba25d2b400f6788fed585303cf8508ec
- SHA512
  
  1ce988d85b248fc16c79af9b983fa279435792ff51da24cd2b5ec0c09bcd67518d8517a07fa24a63bf550fad6456e219300aa764031d1f10c2c703c38bfa8b19
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh5RWnx:hDXWipuE+K3/SSHgxkx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2