04a5be756e4a354420d36f9a7f07299d79a9c360a2ff0f3c74d73a41bda07798 | Triage

Sharing

General

Target

17c5e34f35de7fc18d3eaf8803dd5a04_JaffaCakes118
Size

452KB
Sample

240505-p6ay1sae7y
MD5

17c5e34f35de7fc18d3eaf8803dd5a04
SHA1

da0d126b5b207b47cd93619994c3f5a67c83f9e3
SHA256

04a5be756e4a354420d36f9a7f07299d79a9c360a2ff0f3c74d73a41bda07798
SHA512

6691ed6d20954e90c28aa61f953a9d03e93294bca872f9faaa848fa6ce45f34cd4f4abcafb7876519e814ec83407816a653d1194493ead7070baf3ace2e2d2ec
SSDEEP

6144:Gl2wg+LeOFRCOGB6B35Cuhcw+P6kAf4rcwR64e774VTGo7d02OVdBTNwIdkXYC:zOFAOGQ55CuhcwA0uvS7sV9d0261jad

Score

7^/10

Malware Config

Targets

- Target
  
  17c5e34f35de7fc18d3eaf8803dd5a04_JaffaCakes118
- Size
  
  452KB
- MD5
  
  17c5e34f35de7fc18d3eaf8803dd5a04
- SHA1
  
  da0d126b5b207b47cd93619994c3f5a67c83f9e3
- SHA256
  
  04a5be756e4a354420d36f9a7f07299d79a9c360a2ff0f3c74d73a41bda07798
- SHA512
  
  6691ed6d20954e90c28aa61f953a9d03e93294bca872f9faaa848fa6ce45f34cd4f4abcafb7876519e814ec83407816a653d1194493ead7070baf3ace2e2d2ec
- SSDEEP
  
  6144:Gl2wg+LeOFRCOGB6B35Cuhcw+P6kAf4rcwR64e774VTGo7d02OVdBTNwIdkXYC:zOFAOGQ55CuhcwA0uvS7sV9d0261jad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2