a58812c85e9764759bd22d462526881cecbdddb0fe0dd60b90ff5ee8124b6a6f | Triage

Sharing

General

Target

44e95acd9c7768ce6a2de64f44ea101e_JaffaCakes118
Size

92KB
Sample

240714-jj6vaavale
MD5

44e95acd9c7768ce6a2de64f44ea101e
SHA1

f4bda62f133435e87e32d3fa4b76c64db44e6e11
SHA256

a58812c85e9764759bd22d462526881cecbdddb0fe0dd60b90ff5ee8124b6a6f
SHA512

841ab6ae48ff1a48d203086f7e523f36ead1ab0dbde87fb7d44e20c91fcbaa32ecfac1a340e567c42463141b1d9f5f5c70d5cb05b0f7fde9103257c9ea104e7c
SSDEEP

1536:L2OyM+vOxt0c5hfHP1qlmv60lHj4UraTPVPSPkP4PjPAkbohaWdV7lObdEZxHwA4:3EA0c5Olmv60l3LbohaMAuwiNCP7b

Score

7^/10

Malware Config

Targets

- Target
  
  44e95acd9c7768ce6a2de64f44ea101e_JaffaCakes118
- Size
  
  92KB
- MD5
  
  44e95acd9c7768ce6a2de64f44ea101e
- SHA1
  
  f4bda62f133435e87e32d3fa4b76c64db44e6e11
- SHA256
  
  a58812c85e9764759bd22d462526881cecbdddb0fe0dd60b90ff5ee8124b6a6f
- SHA512
  
  841ab6ae48ff1a48d203086f7e523f36ead1ab0dbde87fb7d44e20c91fcbaa32ecfac1a340e567c42463141b1d9f5f5c70d5cb05b0f7fde9103257c9ea104e7c
- SSDEEP
  
  1536:L2OyM+vOxt0c5hfHP1qlmv60lHj4UraTPVPSPkP4PjPAkbohaWdV7lObdEZxHwA4:3EA0c5Olmv60l3LbohaMAuwiNCP7b
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2