21a029589f9c6d5de13ff4ba28bfd5b81c753302fca2b50a1895bfb7ad8ecbf0 | Triage

Sharing

General

Target

6552159a8399d341c4104be63045ef4b_JaffaCakes118
Size

329KB
Sample

240522-ameersef7z
MD5

6552159a8399d341c4104be63045ef4b
SHA1

e2de5a00c165df4d5b96b016ba7626dd8d22cb40
SHA256

21a029589f9c6d5de13ff4ba28bfd5b81c753302fca2b50a1895bfb7ad8ecbf0
SHA512

cc3894490e165b7a151486be14da334843d6a4f05e0d127ffe0ebee91cf92f9eb4b5d22c21911594984b81aefe5393da7294e35b49c149556dbb79f5c5defaef
SSDEEP

6144:MV/cpm7L0zOSuBLbii5bkgVuN+xSKV7Wkrsf7LskpqS06oGYR9Bc:MVEeLgfcXikbkgaISKVsoP9Bc

Score

7^/10

Malware Config

Targets

- Target
  
  6552159a8399d341c4104be63045ef4b_JaffaCakes118
- Size
  
  329KB
- MD5
  
  6552159a8399d341c4104be63045ef4b
- SHA1
  
  e2de5a00c165df4d5b96b016ba7626dd8d22cb40
- SHA256
  
  21a029589f9c6d5de13ff4ba28bfd5b81c753302fca2b50a1895bfb7ad8ecbf0
- SHA512
  
  cc3894490e165b7a151486be14da334843d6a4f05e0d127ffe0ebee91cf92f9eb4b5d22c21911594984b81aefe5393da7294e35b49c149556dbb79f5c5defaef
- SSDEEP
  
  6144:MV/cpm7L0zOSuBLbii5bkgVuN+xSKV7Wkrsf7LskpqS06oGYR9Bc:MVEeLgfcXikbkgaISKVsoP9Bc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2