620b5b6ae792e54a45612090924d05831fc567ba3687c3b8be903bce1138a101 | Triage

Sharing

General

Target

65a6f8c22964953574757b191a1cbb07_JaffaCakes118
Size

233KB
Sample

240522-cng86ahc4x
MD5

65a6f8c22964953574757b191a1cbb07
SHA1

c13fe02cccfa513e92204721e92d9542abb894bb
SHA256

620b5b6ae792e54a45612090924d05831fc567ba3687c3b8be903bce1138a101
SHA512

d68bb7927e43600239ef802a2268ca939fbcd214b58ba5f73b9801c817596377101dd8dd341757e61ed2d7b3c090fe73d50ac560afc6883f4f6bb9a907a2d80d
SSDEEP

6144:4xyMeM8tKmy/q7RglyFlqsGnK48uGSiU4p1:4xyMehti/8R7lJEGSiU4r

Score

7^/10

Malware Config

Targets

- Target
  
  65a6f8c22964953574757b191a1cbb07_JaffaCakes118
- Size
  
  233KB
- MD5
  
  65a6f8c22964953574757b191a1cbb07
- SHA1
  
  c13fe02cccfa513e92204721e92d9542abb894bb
- SHA256
  
  620b5b6ae792e54a45612090924d05831fc567ba3687c3b8be903bce1138a101
- SHA512
  
  d68bb7927e43600239ef802a2268ca939fbcd214b58ba5f73b9801c817596377101dd8dd341757e61ed2d7b3c090fe73d50ac560afc6883f4f6bb9a907a2d80d
- SSDEEP
  
  6144:4xyMeM8tKmy/q7RglyFlqsGnK48uGSiU4p1:4xyMehti/8R7lJEGSiU4r
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2