d4fc8c0f6f82e08b38695a55add0c66ef8b679fbd05510e44ab1e315c266f328 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79290a7932678e15ea3efb23788e0bd9_JaffaCakes118
Size

108KB
Sample

240527-pn1fysca4x
MD5

79290a7932678e15ea3efb23788e0bd9
SHA1

8dc83219fba2a204dd18b137236263861ce9179a
SHA256

d4fc8c0f6f82e08b38695a55add0c66ef8b679fbd05510e44ab1e315c266f328
SHA512

c810c4b1f2038ed8b61cb71ee691b60e963f724cafd2e66bfbc436dd25b0a11c48f4f43bdd3b9edc44d649a4c4736cd336cf62c49e5b92cb7357c747ff569a75
SSDEEP

3072:YszZnKNLSfWInbuLB9xeCBLu4+uIrjDHm1G6H:Ys8ZSfWInb7CRu4EjDKJ

Score

7^/10

Malware Config

Targets

- Target
  
  79290a7932678e15ea3efb23788e0bd9_JaffaCakes118
- Size
  
  108KB
- MD5
  
  79290a7932678e15ea3efb23788e0bd9
- SHA1
  
  8dc83219fba2a204dd18b137236263861ce9179a
- SHA256
  
  d4fc8c0f6f82e08b38695a55add0c66ef8b679fbd05510e44ab1e315c266f328
- SHA512
  
  c810c4b1f2038ed8b61cb71ee691b60e963f724cafd2e66bfbc436dd25b0a11c48f4f43bdd3b9edc44d649a4c4736cd336cf62c49e5b92cb7357c747ff569a75
- SSDEEP
  
  3072:YszZnKNLSfWInbuLB9xeCBLu4+uIrjDHm1G6H:Ys8ZSfWInb7CRu4EjDKJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2