9c9db5c944af9f0f6de2793fb1add90a91388d6fa5f210933d907b57606ceecb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f18e2ce8637e41f7dbb724f1ae1540c_JaffaCakes118
Size

8KB
Sample

240513-ms2hpsag9z
MD5

3f18e2ce8637e41f7dbb724f1ae1540c
SHA1

200b7578e0aa991170ae3f3657820e83064749c7
SHA256

9c9db5c944af9f0f6de2793fb1add90a91388d6fa5f210933d907b57606ceecb
SHA512

e1b240858a8b2bb8b3d980a4ef55818d4f639333a7c373ef198e0aef6e575ecec1130605ffaa7e6dcd6891d9d989c56e604be8d270371a993b284da189836675
SSDEEP

96:1g2aehFYFQV0JuHnnwR2UDCtKabMQhRFd:PtemyUnwR2rpbMGd

Score

7^/10

Malware Config

Targets

- Target
  
  3f18e2ce8637e41f7dbb724f1ae1540c_JaffaCakes118
- Size
  
  8KB
- MD5
  
  3f18e2ce8637e41f7dbb724f1ae1540c
- SHA1
  
  200b7578e0aa991170ae3f3657820e83064749c7
- SHA256
  
  9c9db5c944af9f0f6de2793fb1add90a91388d6fa5f210933d907b57606ceecb
- SHA512
  
  e1b240858a8b2bb8b3d980a4ef55818d4f639333a7c373ef198e0aef6e575ecec1130605ffaa7e6dcd6891d9d989c56e604be8d270371a993b284da189836675
- SSDEEP
  
  96:1g2aehFYFQV0JuHnnwR2UDCtKabMQhRFd:PtemyUnwR2rpbMGd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2