86173557394f3db9f0190ba38d9229ab2f93721c01b67a080af58b168c434442 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bf6e5cf12a45138dae632ad05ab08c6_JaffaCakes118
Size

687KB
Sample

240701-wky72s1fka
MD5

1bf6e5cf12a45138dae632ad05ab08c6
SHA1

0e5c731ac4e592c329d2b0a2bd1b2ac65a5da34b
SHA256

86173557394f3db9f0190ba38d9229ab2f93721c01b67a080af58b168c434442
SHA512

1b8e1123799a567096f5f4fc45c665658db82efda9629440a509480d83cfed3e86a332fd5089320d91622a135d7b7ed53011d345f05d2e7d7d87eefe6d26d81c
SSDEEP

12288:6GcoX95w5KwZgSCP70sZvqmBG0qLAWmhuKf3Smw+VInXDcTTYLG:0aDw5S34x6GaHuKf3l5V6cTTYS

Score

7^/10

Malware Config

Targets

- Target
  
  1bf6e5cf12a45138dae632ad05ab08c6_JaffaCakes118
- Size
  
  687KB
- MD5
  
  1bf6e5cf12a45138dae632ad05ab08c6
- SHA1
  
  0e5c731ac4e592c329d2b0a2bd1b2ac65a5da34b
- SHA256
  
  86173557394f3db9f0190ba38d9229ab2f93721c01b67a080af58b168c434442
- SHA512
  
  1b8e1123799a567096f5f4fc45c665658db82efda9629440a509480d83cfed3e86a332fd5089320d91622a135d7b7ed53011d345f05d2e7d7d87eefe6d26d81c
- SSDEEP
  
  12288:6GcoX95w5KwZgSCP70sZvqmBG0qLAWmhuKf3Smw+VInXDcTTYLG:0aDw5S34x6GaHuKf3l5V6cTTYS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2