3aefd51b1160b33f8266af5b59d22c76b8668fcf789907373b18a124f0b09408 | Triage

Sharing

General

Target

ed98fc7fcc0a7b9ea592d0580eb63335_JaffaCakes118
Size

14KB
Sample

240411-rekp9agb5x
MD5

ed98fc7fcc0a7b9ea592d0580eb63335
SHA1

9d084ee742a1a0283e9faeee839178242f85395d
SHA256

3aefd51b1160b33f8266af5b59d22c76b8668fcf789907373b18a124f0b09408
SHA512

1274f01e7d83b2a91c831d3a4e894e2df27269fb40c90b563f676b224e490b8f05d3bbd687528350384ef3d23fb59b2d92949134bc133bae5535bf04dad93393
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYq44S:hDXWipuE+K3/SSHgxmq44S

Score

7^/10

Malware Config

Targets

- Target
  
  ed98fc7fcc0a7b9ea592d0580eb63335_JaffaCakes118
- Size
  
  14KB
- MD5
  
  ed98fc7fcc0a7b9ea592d0580eb63335
- SHA1
  
  9d084ee742a1a0283e9faeee839178242f85395d
- SHA256
  
  3aefd51b1160b33f8266af5b59d22c76b8668fcf789907373b18a124f0b09408
- SHA512
  
  1274f01e7d83b2a91c831d3a4e894e2df27269fb40c90b563f676b224e490b8f05d3bbd687528350384ef3d23fb59b2d92949134bc133bae5535bf04dad93393
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYq44S:hDXWipuE+K3/SSHgxmq44S
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2