f9ecaaf4f169e08b94bd61eaa7adeb13e2f4f012c3c7e67b9ce04007e875579b | Triage

Sharing

General

Target

105f5b02bd2635f2288c2b9a64e0bf83_JaffaCakes118
Size

76KB
Sample

240503-m9jdfsfa84
MD5

105f5b02bd2635f2288c2b9a64e0bf83
SHA1

cecc1fbe8090fb540184030c14258a162e2e0899
SHA256

f9ecaaf4f169e08b94bd61eaa7adeb13e2f4f012c3c7e67b9ce04007e875579b
SHA512

cda2fd9e67f7b9aec09db8a7349ec9df7d17c53cc90cf169f063790cbcccac8cf431641b4b919c209dec54ba27e407048a987c7fccd64f545d45b451713e2a75
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4U9HueDgaRWDtJgXkelGhwR:vj+jsMQMOtEvwDpj5H8u8rLXkeEwR

Score

7^/10

Malware Config

Targets

- Target
  
  105f5b02bd2635f2288c2b9a64e0bf83_JaffaCakes118
- Size
  
  76KB
- MD5
  
  105f5b02bd2635f2288c2b9a64e0bf83
- SHA1
  
  cecc1fbe8090fb540184030c14258a162e2e0899
- SHA256
  
  f9ecaaf4f169e08b94bd61eaa7adeb13e2f4f012c3c7e67b9ce04007e875579b
- SHA512
  
  cda2fd9e67f7b9aec09db8a7349ec9df7d17c53cc90cf169f063790cbcccac8cf431641b4b919c209dec54ba27e407048a987c7fccd64f545d45b451713e2a75
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4U9HueDgaRWDtJgXkelGhwR:vj+jsMQMOtEvwDpj5H8u8rLXkeEwR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2