81123e7d05d073315356ad15c56843aa19a1f99a7d75c38d73a4f7c0feb4132f | Triage

Sharing

General

Target

fba40ce403cb8b5516ce95d64bffee2e_JaffaCakes118
Size

15KB
Sample

240420-b1ztasea2v
MD5

fba40ce403cb8b5516ce95d64bffee2e
SHA1

8c81f5732db2a73b836a488ed08faaf1d3266e4b
SHA256

81123e7d05d073315356ad15c56843aa19a1f99a7d75c38d73a4f7c0feb4132f
SHA512

e06f8f6229eb07427b60d8cb1066ed0041b9d7aedbcb38e013348bd295f39531ff5800a5cc7ae10c7dab3e00d74c42379527c0f67c6ccac428a39ebafbee2a9a
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyhud9:hDXWipuE+K3/SSHgxmyhud9

Score

7^/10

Malware Config

Targets

- Target
  
  fba40ce403cb8b5516ce95d64bffee2e_JaffaCakes118
- Size
  
  15KB
- MD5
  
  fba40ce403cb8b5516ce95d64bffee2e
- SHA1
  
  8c81f5732db2a73b836a488ed08faaf1d3266e4b
- SHA256
  
  81123e7d05d073315356ad15c56843aa19a1f99a7d75c38d73a4f7c0feb4132f
- SHA512
  
  e06f8f6229eb07427b60d8cb1066ed0041b9d7aedbcb38e013348bd295f39531ff5800a5cc7ae10c7dab3e00d74c42379527c0f67c6ccac428a39ebafbee2a9a
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyhud9:hDXWipuE+K3/SSHgxmyhud9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2