bf474ba85693250fc3b5d5f41aa8ebc3f103b681832ecd93bff7002256505538 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6997f8a82e0559c326ff6b1d2e6062c7_JaffaCakes118
Size

13KB
Sample

240523-d2qm5acc8z
MD5

6997f8a82e0559c326ff6b1d2e6062c7
SHA1

bad1f83bb7657ca443baff99fa3ae3d1f577f157
SHA256

bf474ba85693250fc3b5d5f41aa8ebc3f103b681832ecd93bff7002256505538
SHA512

248571953a01c1339362b5775bc8befa5d3c04665b6e52c7fcdbacba1d11ba9724b2a107c9dff8a2fc576a3d14a3eda705cf8bfd99d8345040c47f7a88201956
SSDEEP

192:KtZR5Fhp8cdwpHR3AkPLiM79mLU2Pcihcum:m5FZdgAkTiM79mgLQcum

Score

7^/10

Malware Config

Targets

- Target
  
  6997f8a82e0559c326ff6b1d2e6062c7_JaffaCakes118
- Size
  
  13KB
- MD5
  
  6997f8a82e0559c326ff6b1d2e6062c7
- SHA1
  
  bad1f83bb7657ca443baff99fa3ae3d1f577f157
- SHA256
  
  bf474ba85693250fc3b5d5f41aa8ebc3f103b681832ecd93bff7002256505538
- SHA512
  
  248571953a01c1339362b5775bc8befa5d3c04665b6e52c7fcdbacba1d11ba9724b2a107c9dff8a2fc576a3d14a3eda705cf8bfd99d8345040c47f7a88201956
- SSDEEP
  
  192:KtZR5Fhp8cdwpHR3AkPLiM79mLU2Pcihcum:m5FZdgAkTiM79mgLQcum
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2