bd2dfe4e4765b7ddf5b7bacbe87030e11230c8c69857beae98d809cf0c9ae749 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b30b119e914fff3873abc24df18e9d_JaffaCakes118
Size

465KB
Sample

240704-fkhbjavhnl
MD5

24b30b119e914fff3873abc24df18e9d
SHA1

112092760378fd6a0cf11343a4706d87743afe88
SHA256

bd2dfe4e4765b7ddf5b7bacbe87030e11230c8c69857beae98d809cf0c9ae749
SHA512

ddee9b36eb2ef7ac806cb8ab1e1f156d37198a687a3a93e828cd1837f6dd89cd3da8314eab5485523486ab44a39cf743094b9e047620e23db5537d0e888d9e89
SSDEEP

12288:gutrzh9xOXk6j09umTpQewOHcEFdDRV8795Lemo:gutr5OU6jQumTpQewIxV87XLo

Score

7^/10

Malware Config

Targets

- Target
  
  24b30b119e914fff3873abc24df18e9d_JaffaCakes118
- Size
  
  465KB
- MD5
  
  24b30b119e914fff3873abc24df18e9d
- SHA1
  
  112092760378fd6a0cf11343a4706d87743afe88
- SHA256
  
  bd2dfe4e4765b7ddf5b7bacbe87030e11230c8c69857beae98d809cf0c9ae749
- SHA512
  
  ddee9b36eb2ef7ac806cb8ab1e1f156d37198a687a3a93e828cd1837f6dd89cd3da8314eab5485523486ab44a39cf743094b9e047620e23db5537d0e888d9e89
- SSDEEP
  
  12288:gutrzh9xOXk6j09umTpQewOHcEFdDRV8795Lemo:gutr5OU6jQumTpQewIxV87XLo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2