24716caed6e6227e2c6ce76ab05c9325105f3384ebdce7a9dc79e9edbbe46cf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0265c2937b6941412677e42ee1929b8_JaffaCakes118
Size

15KB
Sample

240415-djywsaff5s
MD5

f0265c2937b6941412677e42ee1929b8
SHA1

c0d73d2f4ebe5b66488aaa30e5728b5d76dc89e2
SHA256

24716caed6e6227e2c6ce76ab05c9325105f3384ebdce7a9dc79e9edbbe46cf5
SHA512

2fb88589ba95867c17f724bce7351224dbd076798693c6642210771de78d14f2e1662a9c185b7165cd5e028958985b65a9f061d4ca18d6b99c04590ee6812442
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhilA:hDXWipuE+K3/SSHgxLii

Score

7^/10

Malware Config

Targets

- Target
  
  f0265c2937b6941412677e42ee1929b8_JaffaCakes118
- Size
  
  15KB
- MD5
  
  f0265c2937b6941412677e42ee1929b8
- SHA1
  
  c0d73d2f4ebe5b66488aaa30e5728b5d76dc89e2
- SHA256
  
  24716caed6e6227e2c6ce76ab05c9325105f3384ebdce7a9dc79e9edbbe46cf5
- SHA512
  
  2fb88589ba95867c17f724bce7351224dbd076798693c6642210771de78d14f2e1662a9c185b7165cd5e028958985b65a9f061d4ca18d6b99c04590ee6812442
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhilA:hDXWipuE+K3/SSHgxLii
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2