82f159d7eac5e49c5710efa5beb32217b6b6b76339b3bc77ee77fa6bee27e450 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17e6163290e79b46d29d79189d8c0ed3_JaffaCakes118
Size

317KB
Sample

240505-qsbttsee79
MD5

17e6163290e79b46d29d79189d8c0ed3
SHA1

6022fde0a6cb984472cc28b0bde082ae5e2c95d7
SHA256

82f159d7eac5e49c5710efa5beb32217b6b6b76339b3bc77ee77fa6bee27e450
SHA512

cf9e1e1f569ad1b9c9a2125a1d48c637a4cdec96ff677ece80cd460a8c4201dfbc00e1c81c0a53dd581079093ab729bdee424183a25ce7064bdfefdb03ca4c1f
SSDEEP

6144:H2yYM47toLbii5bkgVuN+xSKV7Wkrsf7LsgEyd+xhsB3anw730zy:H2yYM47qXikbkgaISKVAfd+h1nw7sy

Score

7^/10

Malware Config

Targets

- Target
  
  17e6163290e79b46d29d79189d8c0ed3_JaffaCakes118
- Size
  
  317KB
- MD5
  
  17e6163290e79b46d29d79189d8c0ed3
- SHA1
  
  6022fde0a6cb984472cc28b0bde082ae5e2c95d7
- SHA256
  
  82f159d7eac5e49c5710efa5beb32217b6b6b76339b3bc77ee77fa6bee27e450
- SHA512
  
  cf9e1e1f569ad1b9c9a2125a1d48c637a4cdec96ff677ece80cd460a8c4201dfbc00e1c81c0a53dd581079093ab729bdee424183a25ce7064bdfefdb03ca4c1f
- SSDEEP
  
  6144:H2yYM47toLbii5bkgVuN+xSKV7Wkrsf7LsgEyd+xhsB3anw730zy:H2yYM47qXikbkgaISKVAfd+h1nw7sy
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2