e8ae9e937dd2ad67eb5cf8d480c7f8c9c556640346c6c3bf7d8fdf4f5fd9210f | Triage

Sharing

General

Target

f7b2c399eb69908534a42c94d574b295_JaffaCakes118
Size

3KB
Sample

240418-k73m7sab8y
MD5

f7b2c399eb69908534a42c94d574b295
SHA1

55ed932450c9c93a5b83e9cfabaad0273c0a2c1c
SHA256

e8ae9e937dd2ad67eb5cf8d480c7f8c9c556640346c6c3bf7d8fdf4f5fd9210f
SHA512

7c4bf3a42c87027c08d2a477356a5fe638af7e751598457e070b29c140e23dc912769168d7d00daefc980b0cd7cf4c9208df7c2b1c0b3d5c1f1115fe497176dd

Score

7^/10

Malware Config

Targets

- Target
  
  f7b2c399eb69908534a42c94d574b295_JaffaCakes118
- Size
  
  3KB
- MD5
  
  f7b2c399eb69908534a42c94d574b295
- SHA1
  
  55ed932450c9c93a5b83e9cfabaad0273c0a2c1c
- SHA256
  
  e8ae9e937dd2ad67eb5cf8d480c7f8c9c556640346c6c3bf7d8fdf4f5fd9210f
- SHA512
  
  7c4bf3a42c87027c08d2a477356a5fe638af7e751598457e070b29c140e23dc912769168d7d00daefc980b0cd7cf4c9208df7c2b1c0b3d5c1f1115fe497176dd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2