f08d3fc42938ef947f8d07a5bd99ac45f8e387585b4c741e96c33809c6cdd437 | Triage

Sharing

General

Target

323af91c806601de87841e05b00b63cf_JaffaCakes118
Size

374KB
Sample

240709-2ebsfs1fld
MD5

323af91c806601de87841e05b00b63cf
SHA1

b7c5a012a60381f89e069ec16e689b4e69b9e91d
SHA256

f08d3fc42938ef947f8d07a5bd99ac45f8e387585b4c741e96c33809c6cdd437
SHA512

8388bfdc8bdb56442e6803b5027cc6e06e2a1db7dc7748fd76e84b8d5cafdbaec7b36725d8de1501fcb353535bd3661ca61affb2ec0a8373cdad597c5f660128
SSDEEP

6144:ilEdB/6CS4V0T/IomwEe1VO49EYFzDCpWZ5m7UHxhhtmXo5G6pcoHkbdEx:5xtaTgom/LYfZ5mIHvg8cxbCx

Score

7^/10

Malware Config

Targets

- Target
  
  323af91c806601de87841e05b00b63cf_JaffaCakes118
- Size
  
  374KB
- MD5
  
  323af91c806601de87841e05b00b63cf
- SHA1
  
  b7c5a012a60381f89e069ec16e689b4e69b9e91d
- SHA256
  
  f08d3fc42938ef947f8d07a5bd99ac45f8e387585b4c741e96c33809c6cdd437
- SHA512
  
  8388bfdc8bdb56442e6803b5027cc6e06e2a1db7dc7748fd76e84b8d5cafdbaec7b36725d8de1501fcb353535bd3661ca61affb2ec0a8373cdad597c5f660128
- SSDEEP
  
  6144:ilEdB/6CS4V0T/IomwEe1VO49EYFzDCpWZ5m7UHxhhtmXo5G6pcoHkbdEx:5xtaTgom/LYfZ5mIHvg8cxbCx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2