1f01918a8a4f6e89e60ab22fde9e41ca595965b8c276b598462cb11c8c72fa0c | Triage

Sharing

General

Target

ec695b94d7b312233fd6420ea5ea6552_JaffaCakes118
Size

20KB
Sample

240411-b4actagh82
MD5

ec695b94d7b312233fd6420ea5ea6552
SHA1

27c93452ded149b2a5f528ba325ef6e9a7178a68
SHA256

1f01918a8a4f6e89e60ab22fde9e41ca595965b8c276b598462cb11c8c72fa0c
SHA512

52153252f7cef83ff1307acf79e272d505463855a0bbfe42744e18931954d6f2375e9eaf053cbbd3784643c03db27f74aa6175899eaef044d19dc96d22f5ec1a
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4Pn:hDXWipuE+K3/SSHgxmHZPn

Score

7^/10

Malware Config

Targets

- Target
  
  ec695b94d7b312233fd6420ea5ea6552_JaffaCakes118
- Size
  
  20KB
- MD5
  
  ec695b94d7b312233fd6420ea5ea6552
- SHA1
  
  27c93452ded149b2a5f528ba325ef6e9a7178a68
- SHA256
  
  1f01918a8a4f6e89e60ab22fde9e41ca595965b8c276b598462cb11c8c72fa0c
- SHA512
  
  52153252f7cef83ff1307acf79e272d505463855a0bbfe42744e18931954d6f2375e9eaf053cbbd3784643c03db27f74aa6175899eaef044d19dc96d22f5ec1a
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4Pn:hDXWipuE+K3/SSHgxmHZPn
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2