a4c934099489b876056578a9be9f9f5e61697c242303ac8277d3e11c4e9a7c80 | Triage

Sharing

General

Target

48efd5e1d1766c95d53902649d1f185a_JaffaCakes118
Size

717KB
Sample

240715-j2mt5azapc
MD5

48efd5e1d1766c95d53902649d1f185a
SHA1

11c95a5d17f71039feeb2fa131fefa5bf8791ad7
SHA256

a4c934099489b876056578a9be9f9f5e61697c242303ac8277d3e11c4e9a7c80
SHA512

86da0260ed81ca9657596dda1c72192ef91bbffd3b5348f83ccce279b3698a65769cf015fdebb3748facc854fc2c93717532577801092f6e332988f2c86f8d1f
SSDEEP

12288:LjWRsFmDaRO6mN+iHJ1O/Y2da9kBW9z9LKqGCALhuD8hWrUwRpGXp3Z:Lj4D36Mp1spk9kBW99uui88hWn+

Score

7^/10

Malware Config

Targets

- Target
  
  48efd5e1d1766c95d53902649d1f185a_JaffaCakes118
- Size
  
  717KB
- MD5
  
  48efd5e1d1766c95d53902649d1f185a
- SHA1
  
  11c95a5d17f71039feeb2fa131fefa5bf8791ad7
- SHA256
  
  a4c934099489b876056578a9be9f9f5e61697c242303ac8277d3e11c4e9a7c80
- SHA512
  
  86da0260ed81ca9657596dda1c72192ef91bbffd3b5348f83ccce279b3698a65769cf015fdebb3748facc854fc2c93717532577801092f6e332988f2c86f8d1f
- SSDEEP
  
  12288:LjWRsFmDaRO6mN+iHJ1O/Y2da9kBW9z9LKqGCALhuD8hWrUwRpGXp3Z:Lj4D36Mp1spk9kBW99uui88hWn+
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2