fa8bd7973c6d475b9d0059d08b188ca74c75ea99b2f9ca6d3f56edf8662d9565 | Triage

Sharing

General

Target

3957490d7c9f65597277d9bf2a6fefcd_JaffaCakes118
Size

14KB
Sample

240711-qvxjbaycln
MD5

3957490d7c9f65597277d9bf2a6fefcd
SHA1

3bd21d5887a5b17ae4dc273016fff988e82aebd4
SHA256

fa8bd7973c6d475b9d0059d08b188ca74c75ea99b2f9ca6d3f56edf8662d9565
SHA512

5281fa6941e372a1b05db643311be64db5299199aaadab5b6144123174b5c8d1f8a109ad0e66765883d5e0ea829a2af24fe5760b027726a2dd9ad0a0f115ab94
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh97A:hDXWipuE+K3/SSHgxjc

Score

7^/10

Malware Config

Targets

- Target
  
  3957490d7c9f65597277d9bf2a6fefcd_JaffaCakes118
- Size
  
  14KB
- MD5
  
  3957490d7c9f65597277d9bf2a6fefcd
- SHA1
  
  3bd21d5887a5b17ae4dc273016fff988e82aebd4
- SHA256
  
  fa8bd7973c6d475b9d0059d08b188ca74c75ea99b2f9ca6d3f56edf8662d9565
- SHA512
  
  5281fa6941e372a1b05db643311be64db5299199aaadab5b6144123174b5c8d1f8a109ad0e66765883d5e0ea829a2af24fe5760b027726a2dd9ad0a0f115ab94
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh97A:hDXWipuE+K3/SSHgxjc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2