09be6e6b52b231cda4a6c6bc92847369b1a2d22df588c4cf2ca83fbd353fca25 | Triage

Sharing

General

Target

35e0cb0b8dee099906f5805c67b4ea2b_JaffaCakes118
Size

1.2MB
Sample

240710-w4bwvsvhkc
MD5

35e0cb0b8dee099906f5805c67b4ea2b
SHA1

303b4ec12d9469ca244af09a9e2c25f7cc0b1028
SHA256

09be6e6b52b231cda4a6c6bc92847369b1a2d22df588c4cf2ca83fbd353fca25
SHA512

da44217e89b361a93b6f45ea6e1a0c78067dc42b0c085bf7d8510006acf300a8adc0fdfd0da75ce8008384ad726768a7cbe167fcb548873080e02bce50002255
SSDEEP

24576:94zGAtt6tP2jLB0EGb7PmcQYZs7zvtGuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuj:jA8PjlyQZUUuuuuuuuuuuuuuuuuuuuub

Score

7^/10

Malware Config

Targets

- Target
  
  35e0cb0b8dee099906f5805c67b4ea2b_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  35e0cb0b8dee099906f5805c67b4ea2b
- SHA1
  
  303b4ec12d9469ca244af09a9e2c25f7cc0b1028
- SHA256
  
  09be6e6b52b231cda4a6c6bc92847369b1a2d22df588c4cf2ca83fbd353fca25
- SHA512
  
  da44217e89b361a93b6f45ea6e1a0c78067dc42b0c085bf7d8510006acf300a8adc0fdfd0da75ce8008384ad726768a7cbe167fcb548873080e02bce50002255
- SSDEEP
  
  24576:94zGAtt6tP2jLB0EGb7PmcQYZs7zvtGuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuj:jA8PjlyQZUUuuuuuuuuuuuuuuuuuuuub
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2