59f6d1d79be57d0ad07486bae4d98dad5d58bdf1a087ffec7f7561db424b63ed | Triage

Sharing

General

Target

4102c5992e83ebbd940a97102a76ce69_JaffaCakes118
Size

699KB
Sample

240713-ktpt7awgrf
MD5

4102c5992e83ebbd940a97102a76ce69
SHA1

eee619f852d9d544fef09226b889ffdbd239489a
SHA256

59f6d1d79be57d0ad07486bae4d98dad5d58bdf1a087ffec7f7561db424b63ed
SHA512

f14752942104f74148c708550031f58d20c7c2488ed1541271cd64116307be3ad104fe0f6698562eacc10d285b3762fa7c17028f0c2d6b55796d9f0d9259be2a
SSDEEP

12288:Mar6xcJAD8fiJNTTrRcbTVYfCGrSVxrR/9j/fi1/WT9RGns9xafhCp:R6GxiLRcbWfjSVJRlm1/WT9R99xysp

Score

7^/10

Malware Config

Targets

- Target
  
  4102c5992e83ebbd940a97102a76ce69_JaffaCakes118
- Size
  
  699KB
- MD5
  
  4102c5992e83ebbd940a97102a76ce69
- SHA1
  
  eee619f852d9d544fef09226b889ffdbd239489a
- SHA256
  
  59f6d1d79be57d0ad07486bae4d98dad5d58bdf1a087ffec7f7561db424b63ed
- SHA512
  
  f14752942104f74148c708550031f58d20c7c2488ed1541271cd64116307be3ad104fe0f6698562eacc10d285b3762fa7c17028f0c2d6b55796d9f0d9259be2a
- SSDEEP
  
  12288:Mar6xcJAD8fiJNTTrRcbTVYfCGrSVxrR/9j/fi1/WT9RGns9xafhCp:R6GxiLRcbWfjSVJRlm1/WT9R99xysp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2