cc2e079e8fec70fec1b52104725cdc35ff118da22487d7e4c0fbb91fbd10f5f7 | Triage

Sharing

General

Target

f89f25bb6d3e0dbc8e63118a4f512814_JaffaCakes118
Size

676KB
Sample

240418-ya9xxaeb6w
MD5

f89f25bb6d3e0dbc8e63118a4f512814
SHA1

04b0eb534c8ecd591dd2a8b0cdb62fe775eecab8
SHA256

cc2e079e8fec70fec1b52104725cdc35ff118da22487d7e4c0fbb91fbd10f5f7
SHA512

510f90026438636ccbfb9f735d91f06b14fe2bbc1effb031785f5821eec6435e9caa154649ee9848249adc470127ab9fdb869a86b27165264823c7e02a7ced7c
SSDEEP

12288:4f6tHCebR0tCyflokFUFp1AphvuErVFjORSAQ1C:XtXaYyfKkFUFp6zzrVR2SY

Score

7^/10

Malware Config

Targets

- Target
  
  f89f25bb6d3e0dbc8e63118a4f512814_JaffaCakes118
- Size
  
  676KB
- MD5
  
  f89f25bb6d3e0dbc8e63118a4f512814
- SHA1
  
  04b0eb534c8ecd591dd2a8b0cdb62fe775eecab8
- SHA256
  
  cc2e079e8fec70fec1b52104725cdc35ff118da22487d7e4c0fbb91fbd10f5f7
- SHA512
  
  510f90026438636ccbfb9f735d91f06b14fe2bbc1effb031785f5821eec6435e9caa154649ee9848249adc470127ab9fdb869a86b27165264823c7e02a7ced7c
- SSDEEP
  
  12288:4f6tHCebR0tCyflokFUFp1AphvuErVFjORSAQ1C:XtXaYyfKkFUFp6zzrVR2SY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2