01fe2f24bd4d01533be5a17a519005ebb24a5cd860aa187b0e70a0358afa1125 | Triage

Sharing

General

Target

f74d66fbd7991d629e9b6608ddfd0c66_JaffaCakes118
Size

14KB
Sample

240418-fhcchach5v
MD5

f74d66fbd7991d629e9b6608ddfd0c66
SHA1

cb66749dad659878f760d6067971097ec0eed974
SHA256

01fe2f24bd4d01533be5a17a519005ebb24a5cd860aa187b0e70a0358afa1125
SHA512

b3f8e3697659a0698d7629f12e0c9020cd191b54aaa2ac038518b7b71b2367cea19f0776d9b0788d2dc1009580fb18c869253d092e1bfd0dc1f2fac446a83ae3
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZXdHHuM:hDXWipuE+K3/SSHgx3NHHj

Score

7^/10

Malware Config

Targets

- Target
  
  f74d66fbd7991d629e9b6608ddfd0c66_JaffaCakes118
- Size
  
  14KB
- MD5
  
  f74d66fbd7991d629e9b6608ddfd0c66
- SHA1
  
  cb66749dad659878f760d6067971097ec0eed974
- SHA256
  
  01fe2f24bd4d01533be5a17a519005ebb24a5cd860aa187b0e70a0358afa1125
- SHA512
  
  b3f8e3697659a0698d7629f12e0c9020cd191b54aaa2ac038518b7b71b2367cea19f0776d9b0788d2dc1009580fb18c869253d092e1bfd0dc1f2fac446a83ae3
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhZXdHHuM:hDXWipuE+K3/SSHgx3NHHj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2