248384c647cc1d484c97e2bf05c5b0779151524bb80510cdb4d0c3867a63211e | Triage

Sharing

General

Target

30e6e05067efa3eb59089298eb11f323_JaffaCakes118
Size

412KB
Sample

240510-y78fcabb33
MD5

30e6e05067efa3eb59089298eb11f323
SHA1

6ecfc5b41d10937430029436785f9dc9db92e795
SHA256

248384c647cc1d484c97e2bf05c5b0779151524bb80510cdb4d0c3867a63211e
SHA512

163d36861f060891da7fc35dcb300a0d86f8c08780e10bdda12fff058e133df1908d281f3d6f4c77e2f688a431af766aa28fb594e6f1d6ce8728369d486d9454
SSDEEP

6144:H20zgs1sdLrrkKu5s1DrAAOKAObJBjWAune4mwzRbK2s34UY:HzSMs1DrAQhyAuhPzRo4UY

Score

7^/10

Malware Config

Targets

- Target
  
  30e6e05067efa3eb59089298eb11f323_JaffaCakes118
- Size
  
  412KB
- MD5
  
  30e6e05067efa3eb59089298eb11f323
- SHA1
  
  6ecfc5b41d10937430029436785f9dc9db92e795
- SHA256
  
  248384c647cc1d484c97e2bf05c5b0779151524bb80510cdb4d0c3867a63211e
- SHA512
  
  163d36861f060891da7fc35dcb300a0d86f8c08780e10bdda12fff058e133df1908d281f3d6f4c77e2f688a431af766aa28fb594e6f1d6ce8728369d486d9454
- SSDEEP
  
  6144:H20zgs1sdLrrkKu5s1DrAAOKAObJBjWAune4mwzRbK2s34UY:HzSMs1DrAQhyAuhPzRo4UY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2