df661a29bfb429a70a14b81cdbb2154f13d2032dd8c7105bf37ada8a2c3af6ae | Triage

Sharing

General

Target

3d45c15605ec367c46dd7aa6965b30e7_JaffaCakes118
Size

98KB
Sample

240712-n2ntmsvbld
MD5

3d45c15605ec367c46dd7aa6965b30e7
SHA1

f920b532d71fd85b6183ecaea519e51b90997154
SHA256

df661a29bfb429a70a14b81cdbb2154f13d2032dd8c7105bf37ada8a2c3af6ae
SHA512

305b1dc96dd39876266941001e44ddfe736ab1d99d251fa91b5ff63628dc163b3427b588054a0f8a505b8773f44f429e933ea0443f35c1d1ce0827248b5dd667
SSDEEP

1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcU7:EfMNE1JG6XMk27EbpOthl0ZUed0U7

Score

7^/10

Malware Config

Targets

- Target
  
  3d45c15605ec367c46dd7aa6965b30e7_JaffaCakes118
- Size
  
  98KB
- MD5
  
  3d45c15605ec367c46dd7aa6965b30e7
- SHA1
  
  f920b532d71fd85b6183ecaea519e51b90997154
- SHA256
  
  df661a29bfb429a70a14b81cdbb2154f13d2032dd8c7105bf37ada8a2c3af6ae
- SHA512
  
  305b1dc96dd39876266941001e44ddfe736ab1d99d251fa91b5ff63628dc163b3427b588054a0f8a505b8773f44f429e933ea0443f35c1d1ce0827248b5dd667
- SSDEEP
  
  1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcU7:EfMNE1JG6XMk27EbpOthl0ZUed0U7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2