c89b736c4e7a4d989271a2a8217904fdcae3fa52abecd8a688ec2177ecff22d7 | Triage

Sharing

General

Target

ff8fc259ff0fa909675f4bff59c38568_JaffaCakes118
Size

15KB
Sample

240421-sj3mased3w
MD5

ff8fc259ff0fa909675f4bff59c38568
SHA1

b1b66f7bdc8885c50b47e3de9a70d254cd50f886
SHA256

c89b736c4e7a4d989271a2a8217904fdcae3fa52abecd8a688ec2177ecff22d7
SHA512

3bb78bbfa9860a781debef5b97f5c5882c379c61629fb0c1ade3c3f32b9a2e8471d5adcf5ab48e4189f999936a181f0a6ab3f6732786d9c9710c503afc870a1b
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhG:hDXWipuE+K3/SSHgxzG

Score

7^/10

Malware Config

Targets

- Target
  
  ff8fc259ff0fa909675f4bff59c38568_JaffaCakes118
- Size
  
  15KB
- MD5
  
  ff8fc259ff0fa909675f4bff59c38568
- SHA1
  
  b1b66f7bdc8885c50b47e3de9a70d254cd50f886
- SHA256
  
  c89b736c4e7a4d989271a2a8217904fdcae3fa52abecd8a688ec2177ecff22d7
- SHA512
  
  3bb78bbfa9860a781debef5b97f5c5882c379c61629fb0c1ade3c3f32b9a2e8471d5adcf5ab48e4189f999936a181f0a6ab3f6732786d9c9710c503afc870a1b
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhG:hDXWipuE+K3/SSHgxzG
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2