0b6e4562d7f25fd323c80b71eb8e8962b7f0b5de0efd477bf38d95c40765898c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a3dfcd6f8aa9355efa8e6682a80d271_JaffaCakes118
Size

108KB
Sample

240711-wx71qa1bqg
MD5

3a3dfcd6f8aa9355efa8e6682a80d271
SHA1

b928f58456112586406e3a401c805a6e3a0f8f12
SHA256

0b6e4562d7f25fd323c80b71eb8e8962b7f0b5de0efd477bf38d95c40765898c
SHA512

c8cc36d1a3916d4640abd04e02ea136b15c0e766c2c3c914b122c121f99b69b7c46ebe7137dbf359622180af0b7d88f2a62eee3140d02116aa68a5e7b9f46f3b
SSDEEP

3072:foTBPyodxmU3mK3zc+ltBbvnR4ts3KHGaHg9OyF2mkkMJW6P2NO:foVP9xmU3mK3zc+ltBbvnR4ts3KHGaH8

Score

7^/10

Malware Config

Targets

- Target
  
  3a3dfcd6f8aa9355efa8e6682a80d271_JaffaCakes118
- Size
  
  108KB
- MD5
  
  3a3dfcd6f8aa9355efa8e6682a80d271
- SHA1
  
  b928f58456112586406e3a401c805a6e3a0f8f12
- SHA256
  
  0b6e4562d7f25fd323c80b71eb8e8962b7f0b5de0efd477bf38d95c40765898c
- SHA512
  
  c8cc36d1a3916d4640abd04e02ea136b15c0e766c2c3c914b122c121f99b69b7c46ebe7137dbf359622180af0b7d88f2a62eee3140d02116aa68a5e7b9f46f3b
- SSDEEP
  
  3072:foTBPyodxmU3mK3zc+ltBbvnR4ts3KHGaHg9OyF2mkkMJW6P2NO:foVP9xmU3mK3zc+ltBbvnR4ts3KHGaH8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2