28dfb8ab52d6227622e6e3100d824cf1db0d025f73b9f412e41039f4cb87b4a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b888ddf6ec5dc8e648f32b51937629e_JaffaCakes118
Size

14KB
Sample

240712-b3pfcatckj
MD5

3b888ddf6ec5dc8e648f32b51937629e
SHA1

0b34813b3d2753ea948ebd4da1af8c51a5a6ec34
SHA256

28dfb8ab52d6227622e6e3100d824cf1db0d025f73b9f412e41039f4cb87b4a4
SHA512

0e2a5765bf18e9090b3fb50050f81a3b9decdd7af8140b6be9c9190dc977113a54303bc538c74635ca150672444f7c325e7130451154185b3e194936a3876768
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhT3:hDXWipuE+K3/SSHgxN3

Score

7^/10

Malware Config

Targets

- Target
  
  3b888ddf6ec5dc8e648f32b51937629e_JaffaCakes118
- Size
  
  14KB
- MD5
  
  3b888ddf6ec5dc8e648f32b51937629e
- SHA1
  
  0b34813b3d2753ea948ebd4da1af8c51a5a6ec34
- SHA256
  
  28dfb8ab52d6227622e6e3100d824cf1db0d025f73b9f412e41039f4cb87b4a4
- SHA512
  
  0e2a5765bf18e9090b3fb50050f81a3b9decdd7af8140b6be9c9190dc977113a54303bc538c74635ca150672444f7c325e7130451154185b3e194936a3876768
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhT3:hDXWipuE+K3/SSHgxN3
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2