fe60d9be6a8f49b5c75789d982a09df91e97e0f608e6169f143d1649ef15079f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c0cb43e3a3ceb646bdc766454b6f0cb_JaffaCakes118
Size

4.5MB
Sample

240701-w4fvtasfkf
MD5

1c0cb43e3a3ceb646bdc766454b6f0cb
SHA1

95ac978dab603e681db1ae3c44037de47450c728
SHA256

fe60d9be6a8f49b5c75789d982a09df91e97e0f608e6169f143d1649ef15079f
SHA512

cdb06365a98c7ed4e476164ffc78ff9c728cf9b83f7263d70b7801282a301bc54fb0cd1ae7c92c622b1d9771f3fabed222972aff4637d6deb584acf2dfe51c0b
SSDEEP

98304:zoDc/LrQTCWCGXlrhi3JElFizF1wDgzP56sDjBh/GOSrGt:c4/LylIJ0FiigzwsJpGOSc

Score

7^/10

Malware Config

Targets

- Target
  
  1c0cb43e3a3ceb646bdc766454b6f0cb_JaffaCakes118
- Size
  
  4.5MB
- MD5
  
  1c0cb43e3a3ceb646bdc766454b6f0cb
- SHA1
  
  95ac978dab603e681db1ae3c44037de47450c728
- SHA256
  
  fe60d9be6a8f49b5c75789d982a09df91e97e0f608e6169f143d1649ef15079f
- SHA512
  
  cdb06365a98c7ed4e476164ffc78ff9c728cf9b83f7263d70b7801282a301bc54fb0cd1ae7c92c622b1d9771f3fabed222972aff4637d6deb584acf2dfe51c0b
- SSDEEP
  
  98304:zoDc/LrQTCWCGXlrhi3JElFizF1wDgzP56sDjBh/GOSrGt:c4/LylIJ0FiigzwsJpGOSc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2