bdd1aa5b1d3e8dffe4507f2bb89cb6aa1978c19df531b0800830c3536f5b066e | Triage

Sharing

General

Target

f55469078242dd69f71096c7dbbe51fe_JaffaCakes118
Size

99KB
Sample

240417-jxqefshd79
MD5

f55469078242dd69f71096c7dbbe51fe
SHA1

0a0b91a8d7eb4dbb899ac20ce1026bda37c9497e
SHA256

bdd1aa5b1d3e8dffe4507f2bb89cb6aa1978c19df531b0800830c3536f5b066e
SHA512

e03d1aa306655a3d1ea2efc767659bcd1b0713299dbc97b5580bab896ac2a4ff87f292096d97873884487fe729f7123385c137f390ef2f827bfde9afa1701441
SSDEEP

3072:3OoLdffdkno7mKfDvgcTifQnlzn237/Zk17C:3Ow/t7mKfr+939aO

Score

7^/10

Malware Config

Targets

- Target
  
  f55469078242dd69f71096c7dbbe51fe_JaffaCakes118
- Size
  
  99KB
- MD5
  
  f55469078242dd69f71096c7dbbe51fe
- SHA1
  
  0a0b91a8d7eb4dbb899ac20ce1026bda37c9497e
- SHA256
  
  bdd1aa5b1d3e8dffe4507f2bb89cb6aa1978c19df531b0800830c3536f5b066e
- SHA512
  
  e03d1aa306655a3d1ea2efc767659bcd1b0713299dbc97b5580bab896ac2a4ff87f292096d97873884487fe729f7123385c137f390ef2f827bfde9afa1701441
- SSDEEP
  
  3072:3OoLdffdkno7mKfDvgcTifQnlzn237/Zk17C:3Ow/t7mKfr+939aO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2