777d866ba8441e780b852033eafc325261c21f08df0da8785e4aa7701e7c763f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffc47c53a02ee706cf3b23ac495d5a41_JaffaCakes118
Size

16KB
Sample

240421-vrdn9agb5w
MD5

ffc47c53a02ee706cf3b23ac495d5a41
SHA1

c786e7a6a643b0565733bdb217d2c10647b823ab
SHA256

777d866ba8441e780b852033eafc325261c21f08df0da8785e4aa7701e7c763f
SHA512

0727d97bfd70c5670f40206d0f330e4e910894a524a4c32a5454b9024d7ace201938e006c54c22475ecf9235f3ef00bac7e62e5de83830bbb8a4eced2d20b60a
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx9S:hDXWipuE+K3/SSHgxmH7S

Score

7^/10

Malware Config

Targets

- Target
  
  ffc47c53a02ee706cf3b23ac495d5a41_JaffaCakes118
- Size
  
  16KB
- MD5
  
  ffc47c53a02ee706cf3b23ac495d5a41
- SHA1
  
  c786e7a6a643b0565733bdb217d2c10647b823ab
- SHA256
  
  777d866ba8441e780b852033eafc325261c21f08df0da8785e4aa7701e7c763f
- SHA512
  
  0727d97bfd70c5670f40206d0f330e4e910894a524a4c32a5454b9024d7ace201938e006c54c22475ecf9235f3ef00bac7e62e5de83830bbb8a4eced2d20b60a
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx9S:hDXWipuE+K3/SSHgxmH7S
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2