b9111ee02cd6b171651d55e935118081506268dd0db2aeb1824f95d77b053663 | Triage

Sharing

General

Target

f1d69cd195beb7d91e890272a8bc9247_JaffaCakes118
Size

15.5MB
Sample

240415-y3azaahd7y
MD5

f1d69cd195beb7d91e890272a8bc9247
SHA1

dacb9583748fd83eb66fc543dbc3ae10d3b9d846
SHA256

b9111ee02cd6b171651d55e935118081506268dd0db2aeb1824f95d77b053663
SHA512

c2b06560c734ac84dbf10d252ee00af28ea5a18dceda7ddc5f30c013d73a1a163140e2ae2001ede8be12ab1e021f1ce8e64167ab85782607c10cb96c43368826
SSDEEP

393216:MgM2yfl6hJEgRtG38UFd3RScLBf2JZWLONpiNY2iVv+vBO:DyfYhJvRtG3pZRpLBOjWaORikBO

Score

7^/10

Malware Config

Targets

- Target
  
  f1d69cd195beb7d91e890272a8bc9247_JaffaCakes118
- Size
  
  15.5MB
- MD5
  
  f1d69cd195beb7d91e890272a8bc9247
- SHA1
  
  dacb9583748fd83eb66fc543dbc3ae10d3b9d846
- SHA256
  
  b9111ee02cd6b171651d55e935118081506268dd0db2aeb1824f95d77b053663
- SHA512
  
  c2b06560c734ac84dbf10d252ee00af28ea5a18dceda7ddc5f30c013d73a1a163140e2ae2001ede8be12ab1e021f1ce8e64167ab85782607c10cb96c43368826
- SSDEEP
  
  393216:MgM2yfl6hJEgRtG38UFd3RScLBf2JZWLONpiNY2iVv+vBO:DyfYhJvRtG3pZRpLBOjWaORikBO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2