d7569b09f58d9e735e4fc23c630a8b8aaac15215707c4bf9a86a5b5df7f4378b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ab1c8c996152269465881cbdfab164f_JaffaCakes118
Size

55KB
Sample

240527-1yx95abg3z
MD5

7ab1c8c996152269465881cbdfab164f
SHA1

f7e3eee483a6ca158cc4fa1095ce90b7469fcdc9
SHA256

d7569b09f58d9e735e4fc23c630a8b8aaac15215707c4bf9a86a5b5df7f4378b
SHA512

58cd03d9dde7fa5d633d26f1d369ee83ab85395c2a8ae613df5dd54a01f9b7937b4031cbcd982fe59c51ba59ab5c38c17a768fb9a42035b94f0a8348af3a7224
SSDEEP

768:QZnwR2FE7Y3EXpejPLIVCrPtFIyao7th2d1zmZ9tRBwM2cG4q4d+suIsHLV:o+2nTbFIy1uqRB64B+sQp

Score

7^/10

Malware Config

Targets

- Target
  
  7ab1c8c996152269465881cbdfab164f_JaffaCakes118
- Size
  
  55KB
- MD5
  
  7ab1c8c996152269465881cbdfab164f
- SHA1
  
  f7e3eee483a6ca158cc4fa1095ce90b7469fcdc9
- SHA256
  
  d7569b09f58d9e735e4fc23c630a8b8aaac15215707c4bf9a86a5b5df7f4378b
- SHA512
  
  58cd03d9dde7fa5d633d26f1d369ee83ab85395c2a8ae613df5dd54a01f9b7937b4031cbcd982fe59c51ba59ab5c38c17a768fb9a42035b94f0a8348af3a7224
- SSDEEP
  
  768:QZnwR2FE7Y3EXpejPLIVCrPtFIyao7th2d1zmZ9tRBwM2cG4q4d+suIsHLV:o+2nTbFIy1uqRB64B+sQp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2