30193d6ac17ae011fe6c3524130cb6bc44da7ef2dd081e3efbcb4b92ef1a2fec | Triage

Sharing

General

Target

0d6d6fe2f3666f22ae1773e0cd7c5bab_JaffaCakes118
Size

401KB
Sample

240625-kpr4razbpc
MD5

0d6d6fe2f3666f22ae1773e0cd7c5bab
SHA1

9c2abce854fab21044e4d90dbbfcf5b96c9ce0ac
SHA256

30193d6ac17ae011fe6c3524130cb6bc44da7ef2dd081e3efbcb4b92ef1a2fec
SHA512

6270ff3783f6bfbb36e34d69e425a2a018637058ac0ae3fde51052319bcdd2b9202d07aad1be4bc9c3d2fdfcf5516babfda7a8967bd85f5affcb3fe08c4e5b86
SSDEEP

12288:w9IEr7LVvNJ0pelp1cRImysfO1w68hQaX1:V6FvYelTmyyOS6IQaF

Score

7^/10

Malware Config

Targets

- Target
  
  0d6d6fe2f3666f22ae1773e0cd7c5bab_JaffaCakes118
- Size
  
  401KB
- MD5
  
  0d6d6fe2f3666f22ae1773e0cd7c5bab
- SHA1
  
  9c2abce854fab21044e4d90dbbfcf5b96c9ce0ac
- SHA256
  
  30193d6ac17ae011fe6c3524130cb6bc44da7ef2dd081e3efbcb4b92ef1a2fec
- SHA512
  
  6270ff3783f6bfbb36e34d69e425a2a018637058ac0ae3fde51052319bcdd2b9202d07aad1be4bc9c3d2fdfcf5516babfda7a8967bd85f5affcb3fe08c4e5b86
- SSDEEP
  
  12288:w9IEr7LVvNJ0pelp1cRImysfO1w68hQaX1:V6FvYelTmyyOS6IQaF
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2