ffa6ff884b941d0431103892fa4d2804e23f960bed61f726379dfcfc31151016 | Triage

Sharing

General

Target

ec918e26cd1bb819a5481ce78b933f7d_JaffaCakes118
Size

16KB
Sample

240411-dyhs4sea9z
MD5

ec918e26cd1bb819a5481ce78b933f7d
SHA1

4510818d87d1c8b9c4879b8c932fa55f19b9560e
SHA256

ffa6ff884b941d0431103892fa4d2804e23f960bed61f726379dfcfc31151016
SHA512

f1bc08ac6cade686351253ee255d391e3a7b75e744e74834ecc4b599cb3536d50d6f253a334476af5e4ebf26600abe322b4be5dbd3da1edcfd78467d42814565
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYze:hDXWipuE+K3/SSHgxmze

Score

7^/10

Malware Config

Targets

- Target
  
  ec918e26cd1bb819a5481ce78b933f7d_JaffaCakes118
- Size
  
  16KB
- MD5
  
  ec918e26cd1bb819a5481ce78b933f7d
- SHA1
  
  4510818d87d1c8b9c4879b8c932fa55f19b9560e
- SHA256
  
  ffa6ff884b941d0431103892fa4d2804e23f960bed61f726379dfcfc31151016
- SHA512
  
  f1bc08ac6cade686351253ee255d391e3a7b75e744e74834ecc4b599cb3536d50d6f253a334476af5e4ebf26600abe322b4be5dbd3da1edcfd78467d42814565
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYze:hDXWipuE+K3/SSHgxmze
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2