b09c5e70253a1cb5a81643f15f311dd2a5f772c92d662304170372013865a476 | Triage

Sharing

General

Target

eaaa406950ff1a3f95b4974c9fe00b00_JaffaCakes118
Size

44KB
Sample

240410-kgp97ahe79
MD5

eaaa406950ff1a3f95b4974c9fe00b00
SHA1

c79e5c571a0f5966263217a0ed22c66d4e2e8c5b
SHA256

b09c5e70253a1cb5a81643f15f311dd2a5f772c92d662304170372013865a476
SHA512

109a5361ad926c8c36f8651ac520b6288f83a3f73e8c59a2767e61192e5ac533b1bbf133f441e30f19b46a2a9fe286e3e36ffec7d6183ee629be7eede68af975
SSDEEP

768:/VhR61d2hyKIDMi5FazjmilAA8/wv3pclKWhtWS:jed2ZFX/8/wCaS

Score

7^/10

Malware Config

Targets

- Target
  
  eaaa406950ff1a3f95b4974c9fe00b00_JaffaCakes118
- Size
  
  44KB
- MD5
  
  eaaa406950ff1a3f95b4974c9fe00b00
- SHA1
  
  c79e5c571a0f5966263217a0ed22c66d4e2e8c5b
- SHA256
  
  b09c5e70253a1cb5a81643f15f311dd2a5f772c92d662304170372013865a476
- SHA512
  
  109a5361ad926c8c36f8651ac520b6288f83a3f73e8c59a2767e61192e5ac533b1bbf133f441e30f19b46a2a9fe286e3e36ffec7d6183ee629be7eede68af975
- SSDEEP
  
  768:/VhR61d2hyKIDMi5FazjmilAA8/wv3pclKWhtWS:jed2ZFX/8/wCaS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2