104ecef10133e39916d7cfb59e2e335cd7b0358407124781f567efdf8fffa164 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2b96afe78a86a27c3682a6456c7124c_JaffaCakes118
Size

14KB
Sample

240416-fenw5abf7x
MD5

f2b96afe78a86a27c3682a6456c7124c
SHA1

c886bdb830d85eb860fb2b3a987291ff3ef7841e
SHA256

104ecef10133e39916d7cfb59e2e335cd7b0358407124781f567efdf8fffa164
SHA512

d19317dc48db3c1b61bfca6d959217370eb9554ad1e83a02e10ea2f1eaf24d73185e9033d1b8e83323bf530af8649debe1004c301462239b07aec99214f32ec9
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhkRE9i:hDXWipuE+K3/SSHgxB9i

Score

7^/10

Malware Config

Targets

- Target
  
  f2b96afe78a86a27c3682a6456c7124c_JaffaCakes118
- Size
  
  14KB
- MD5
  
  f2b96afe78a86a27c3682a6456c7124c
- SHA1
  
  c886bdb830d85eb860fb2b3a987291ff3ef7841e
- SHA256
  
  104ecef10133e39916d7cfb59e2e335cd7b0358407124781f567efdf8fffa164
- SHA512
  
  d19317dc48db3c1b61bfca6d959217370eb9554ad1e83a02e10ea2f1eaf24d73185e9033d1b8e83323bf530af8649debe1004c301462239b07aec99214f32ec9
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhkRE9i:hDXWipuE+K3/SSHgxB9i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2