01590979bcdbbb2a35bf101782529c26451b7d51825e387da713a253dcba5817 | Triage

Sharing

General

Target

3098052c4b227de2b12ed45842ea0cef_JaffaCakes118
Size

1.8MB
Sample

240709-qwz1tswgkj
MD5

3098052c4b227de2b12ed45842ea0cef
SHA1

cb0a9b301fe51b2fa184e269298a5f495bdf1d5e
SHA256

01590979bcdbbb2a35bf101782529c26451b7d51825e387da713a253dcba5817
SHA512

25cd017d3e31321255a8e75926a46d5628a1a95c0e98dd4a1cff999987479bd0f8476782741dcafdc8d68f4556b2570f07f427fc87ecde760b66ceded70109b1
SSDEEP

24576:uxEGC4ps8mSyN+JvkgzSAPTthuFi4e9EsNGFr3oAjBGZxEGC4ps8B0UP:uxKamSe4l3A4CtGZxKauUP

Score

7^/10

Malware Config

Targets

- Target
  
  3098052c4b227de2b12ed45842ea0cef_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  3098052c4b227de2b12ed45842ea0cef
- SHA1
  
  cb0a9b301fe51b2fa184e269298a5f495bdf1d5e
- SHA256
  
  01590979bcdbbb2a35bf101782529c26451b7d51825e387da713a253dcba5817
- SHA512
  
  25cd017d3e31321255a8e75926a46d5628a1a95c0e98dd4a1cff999987479bd0f8476782741dcafdc8d68f4556b2570f07f427fc87ecde760b66ceded70109b1
- SSDEEP
  
  24576:uxEGC4ps8mSyN+JvkgzSAPTthuFi4e9EsNGFr3oAjBGZxEGC4ps8B0UP:uxKamSe4l3A4CtGZxKauUP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2