6c92b4b25313a1c11acb09a1426a5fbe448c5486cffd46407206a9fe5fcca663 | Triage

Sharing

General

Target

43b503f5d17c96eb74619d92f352a7a1_JaffaCakes118
Size

10KB
Sample

240713-3lbxga1cjq
MD5

43b503f5d17c96eb74619d92f352a7a1
SHA1

0733faab433ee1e49ad0b9fc84c96a9682f21bdf
SHA256

6c92b4b25313a1c11acb09a1426a5fbe448c5486cffd46407206a9fe5fcca663
SHA512

cc88fa74c2d2a4d8ab97dbc6ec5bbe912bb0f762d7039ecb35b829a624cacb954f4dc16bccf0653a0c3477ac857c8d2358cacd54fc33f117978e72d849f29cf0
SSDEEP

192:QpQCaIpJfFFUNsosgrHCE4HyD5tJTWCw34TVxpZ+e8kwvRap:Qpva4fRGhD5tJ6Cw34TVxp18xRY

Score

7^/10

Malware Config

Targets

- Target
  
  43b503f5d17c96eb74619d92f352a7a1_JaffaCakes118
- Size
  
  10KB
- MD5
  
  43b503f5d17c96eb74619d92f352a7a1
- SHA1
  
  0733faab433ee1e49ad0b9fc84c96a9682f21bdf
- SHA256
  
  6c92b4b25313a1c11acb09a1426a5fbe448c5486cffd46407206a9fe5fcca663
- SHA512
  
  cc88fa74c2d2a4d8ab97dbc6ec5bbe912bb0f762d7039ecb35b829a624cacb954f4dc16bccf0653a0c3477ac857c8d2358cacd54fc33f117978e72d849f29cf0
- SSDEEP
  
  192:QpQCaIpJfFFUNsosgrHCE4HyD5tJTWCw34TVxpZ+e8kwvRap:Qpva4fRGhD5tJ6Cw34TVxp18xRY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2