13063eeca7b7035e1687f334132caf11d37d6fd406be2b3b9358cb87437746c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4285cc8ec14751d334abcfb4e91cc3d_JaffaCakes118
Size

448KB
Sample

240616-skbvzascjm
MD5

b4285cc8ec14751d334abcfb4e91cc3d
SHA1

942cb6d4844eec948d0b3035522adabca9528054
SHA256

13063eeca7b7035e1687f334132caf11d37d6fd406be2b3b9358cb87437746c3
SHA512

ef50c0cda3450a6fe4d69a07d993ea519ce8c99fa01dc89411aaeaae6c6da263a254125c678e149e80f08b0c30cffb1f2e12f42c726b32334364498b859ec1a4
SSDEEP

6144:l0PCRT5LgXEhN7th62W4hPpmM7wyxGV6jQ6100nmK1r8iw49cCiKVY5J:vgXEhxth62phxB7wyxGV6Z/4N49cCr8J

Score

7^/10

Malware Config

Targets

- Target
  
  b4285cc8ec14751d334abcfb4e91cc3d_JaffaCakes118
- Size
  
  448KB
- MD5
  
  b4285cc8ec14751d334abcfb4e91cc3d
- SHA1
  
  942cb6d4844eec948d0b3035522adabca9528054
- SHA256
  
  13063eeca7b7035e1687f334132caf11d37d6fd406be2b3b9358cb87437746c3
- SHA512
  
  ef50c0cda3450a6fe4d69a07d993ea519ce8c99fa01dc89411aaeaae6c6da263a254125c678e149e80f08b0c30cffb1f2e12f42c726b32334364498b859ec1a4
- SSDEEP
  
  6144:l0PCRT5LgXEhN7th62W4hPpmM7wyxGV6jQ6100nmK1r8iw49cCiKVY5J:vgXEhxth62phxB7wyxGV6Z/4N49cCr8J
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2