73fa4927f84f85eb9125e70735ed2695eb803b195a7eadfc7ace45be44819334 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e7d97f93155884f3528c910b5f23b86_JaffaCakes118
Size

18.8MB
Sample

240524-pf7v3aah22
MD5

6e7d97f93155884f3528c910b5f23b86
SHA1

2964910a1ddcf9a63d432325cac04c819360807d
SHA256

73fa4927f84f85eb9125e70735ed2695eb803b195a7eadfc7ace45be44819334
SHA512

2a58fa864dbe016a3d47d4f694d4e9a5621ecc01a1b6ab6a11ab139d82c59dc04ce27c67a2a3cd51a3e87a4aa6c57e8a1d87aae7cc83e769ee7edfb8d935c587
SSDEEP

393216:qpeMQjVT6zaeEYazX7f0CttFoHXx5Jm5dMETCJA5zz/ek8AhYcXqz:C3GT6GYakEtFoHzJmLMXJMzGY+

Score

7^/10

Malware Config

Targets

- Target
  
  6e7d97f93155884f3528c910b5f23b86_JaffaCakes118
- Size
  
  18.8MB
- MD5
  
  6e7d97f93155884f3528c910b5f23b86
- SHA1
  
  2964910a1ddcf9a63d432325cac04c819360807d
- SHA256
  
  73fa4927f84f85eb9125e70735ed2695eb803b195a7eadfc7ace45be44819334
- SHA512
  
  2a58fa864dbe016a3d47d4f694d4e9a5621ecc01a1b6ab6a11ab139d82c59dc04ce27c67a2a3cd51a3e87a4aa6c57e8a1d87aae7cc83e769ee7edfb8d935c587
- SSDEEP
  
  393216:qpeMQjVT6zaeEYazX7f0CttFoHXx5Jm5dMETCJA5zz/ek8AhYcXqz:C3GT6GYakEtFoHzJmLMXJMzGY+
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2