234966a2a864916423b878bdbc29cfe9bf05f57786c8565b24b99baa27bd466f | Triage

Sharing

General

Target

8b3e6e4b29eafe2bdd2fff56f8ff0c11_JaffaCakes118
Size

284KB
Sample

240601-wcdalsaa6w
MD5

8b3e6e4b29eafe2bdd2fff56f8ff0c11
SHA1

7c9722c57e3524de226c4535cb494d0e7ab708c1
SHA256

234966a2a864916423b878bdbc29cfe9bf05f57786c8565b24b99baa27bd466f
SHA512

6aafbbe7bbaf928d9694b53a0b90cd9553aa61b3f4d55c01dd40cab34f3a96086ff18cb280577e675832ee9fdf5627f6312521c5d90971c09be979fd012538b7
SSDEEP

6144:vqJqHeI7cWDYO7TyLM7Ajzd54YTx31d8lDQo6lf:fz7c6YO7+LM7AjzIY9PZB

Score

7^/10

Malware Config

Targets

- Target
  
  8b3e6e4b29eafe2bdd2fff56f8ff0c11_JaffaCakes118
- Size
  
  284KB
- MD5
  
  8b3e6e4b29eafe2bdd2fff56f8ff0c11
- SHA1
  
  7c9722c57e3524de226c4535cb494d0e7ab708c1
- SHA256
  
  234966a2a864916423b878bdbc29cfe9bf05f57786c8565b24b99baa27bd466f
- SHA512
  
  6aafbbe7bbaf928d9694b53a0b90cd9553aa61b3f4d55c01dd40cab34f3a96086ff18cb280577e675832ee9fdf5627f6312521c5d90971c09be979fd012538b7
- SSDEEP
  
  6144:vqJqHeI7cWDYO7TyLM7Ajzd54YTx31d8lDQo6lf:fz7c6YO7+LM7AjzIY9PZB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2