000806299f03b9daf8ec5d1deb5b3061acbcdcc329221f34eff477ccd6206483 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd4fc710c0f9f891d9cbd8dbec1fdeb3_JaffaCakes118
Size

16KB
Sample

240420-wk8rgsee9w
MD5

fd4fc710c0f9f891d9cbd8dbec1fdeb3
SHA1

3d1ba92616dd6e29e5757cd0282dcae77258bb92
SHA256

000806299f03b9daf8ec5d1deb5b3061acbcdcc329221f34eff477ccd6206483
SHA512

4f6b40b37619330cf351d929d36da2cd79b21144cf3320cb7e271040b447906e3f9bd84f607a592d246e84b3854bd17c016f9acfe2782e862afa7933108e6e7d
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5tlC:hDXWipuE+K3/SSHgxmBC

Score

7^/10

Malware Config

Targets

- Target
  
  fd4fc710c0f9f891d9cbd8dbec1fdeb3_JaffaCakes118
- Size
  
  16KB
- MD5
  
  fd4fc710c0f9f891d9cbd8dbec1fdeb3
- SHA1
  
  3d1ba92616dd6e29e5757cd0282dcae77258bb92
- SHA256
  
  000806299f03b9daf8ec5d1deb5b3061acbcdcc329221f34eff477ccd6206483
- SHA512
  
  4f6b40b37619330cf351d929d36da2cd79b21144cf3320cb7e271040b447906e3f9bd84f607a592d246e84b3854bd17c016f9acfe2782e862afa7933108e6e7d
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5tlC:hDXWipuE+K3/SSHgxmBC
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2