ab653fbc0331f42a46943415fbfd20ba5cd618ce08601e24c437e1cf7a17374e | Triage

Sharing

General

Target

0a95f401af9f4eaf823cbf0900270245_JaffaCakes118
Size

14KB
Sample

240624-ys69qs1akb
MD5

0a95f401af9f4eaf823cbf0900270245
SHA1

73b9cb3ef7459dc6a8fdd1eacb7225f2c336bfc2
SHA256

ab653fbc0331f42a46943415fbfd20ba5cd618ce08601e24c437e1cf7a17374e
SHA512

2fd1edf1b669b9d471446758d77649abe2fda05923e4af5a7f3d55d770875dcbdd3829a7397d71ac3c0dcc67a7f473991e45c9e5f579df44eef20081c0790a36
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhT6:hDXWipuE+K3/SSHgxN6

Score

7^/10

Malware Config

Targets

- Target
  
  0a95f401af9f4eaf823cbf0900270245_JaffaCakes118
- Size
  
  14KB
- MD5
  
  0a95f401af9f4eaf823cbf0900270245
- SHA1
  
  73b9cb3ef7459dc6a8fdd1eacb7225f2c336bfc2
- SHA256
  
  ab653fbc0331f42a46943415fbfd20ba5cd618ce08601e24c437e1cf7a17374e
- SHA512
  
  2fd1edf1b669b9d471446758d77649abe2fda05923e4af5a7f3d55d770875dcbdd3829a7397d71ac3c0dcc67a7f473991e45c9e5f579df44eef20081c0790a36
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhT6:hDXWipuE+K3/SSHgxN6
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2