3a9ecb0c9d93f4d75fce2cb12b555f6e918378b90c22c48eb5193b51b26559d0 | Triage

Sharing

General

Target

1b91dc2a3e08cc86bc51f955549dd18e_JaffaCakes118
Size

15KB
Sample

240701-ra1kxayfrl
MD5

1b91dc2a3e08cc86bc51f955549dd18e
SHA1

bd713e146b858ea3d2a0130b75325f73232bcf43
SHA256

3a9ecb0c9d93f4d75fce2cb12b555f6e918378b90c22c48eb5193b51b26559d0
SHA512

3ec36c7c8a93ccf864f6b7262f4c65ddc4cb7192b0e91123b9228390159e1eb9939d0ee2ef6ed01f2c88d519b67f95dc108ca370b4654070fad0a2e64db816d7
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxX:hDXWipuE+K3/SSHgxmHB

Score

7^/10

Malware Config

Targets

- Target
  
  1b91dc2a3e08cc86bc51f955549dd18e_JaffaCakes118
- Size
  
  15KB
- MD5
  
  1b91dc2a3e08cc86bc51f955549dd18e
- SHA1
  
  bd713e146b858ea3d2a0130b75325f73232bcf43
- SHA256
  
  3a9ecb0c9d93f4d75fce2cb12b555f6e918378b90c22c48eb5193b51b26559d0
- SHA512
  
  3ec36c7c8a93ccf864f6b7262f4c65ddc4cb7192b0e91123b9228390159e1eb9939d0ee2ef6ed01f2c88d519b67f95dc108ca370b4654070fad0a2e64db816d7
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxX:hDXWipuE+K3/SSHgxmHB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2