33c9d2e50c82076f3a5602fda790a4b5153adb0129d94d701ad7b1f871812580 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4503606834aca3d72bdf5ca54f5537fb_JaffaCakes118
Size

16KB
Sample

240714-j6n8rasgmk
MD5

4503606834aca3d72bdf5ca54f5537fb
SHA1

0cf63a0b1973aa177b1586a6b91bd19155df23fa
SHA256

33c9d2e50c82076f3a5602fda790a4b5153adb0129d94d701ad7b1f871812580
SHA512

fc91237fe9e6e5dcbe5f83c2d2648046ba242c49ecc35d31ec1c9f85929511d1cd845c07b4adb7b563cdb3b69d6b3ca13798c0ddad4750063d3021ad042642d1
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4e:hDXWipuE+K3/SSHgxmHZe

Score

7^/10

Malware Config

Targets

- Target
  
  4503606834aca3d72bdf5ca54f5537fb_JaffaCakes118
- Size
  
  16KB
- MD5
  
  4503606834aca3d72bdf5ca54f5537fb
- SHA1
  
  0cf63a0b1973aa177b1586a6b91bd19155df23fa
- SHA256
  
  33c9d2e50c82076f3a5602fda790a4b5153adb0129d94d701ad7b1f871812580
- SHA512
  
  fc91237fe9e6e5dcbe5f83c2d2648046ba242c49ecc35d31ec1c9f85929511d1cd845c07b4adb7b563cdb3b69d6b3ca13798c0ddad4750063d3021ad042642d1
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4e:hDXWipuE+K3/SSHgxmHZe
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2