f2d2aff9b441c6dd54180d1431bd241a56367ac1940ab62ad96047e4625d1a28 | Triage

Sharing

General

Target

4c71fb33ac694031e4e1c5ef09fa4578_JaffaCakes118
Size

30KB
Sample

240716-c1wmbatene
MD5

4c71fb33ac694031e4e1c5ef09fa4578
SHA1

4f5375388479fbf9ba5851bc5b3565e0abc67111
SHA256

f2d2aff9b441c6dd54180d1431bd241a56367ac1940ab62ad96047e4625d1a28
SHA512

e50916fd9f37f359624dfb96fdf26aea611dc59603b4fd4c946520cf53bd37ac09b7ab933adb24599fbff03612aab54c70fb95649df0b82716709713e7e6a672
SSDEEP

768:8mvGIG2gMVRZ58JSGxE+VOWJEDvwjtQGQEX1nyN+gK:M7MoEyOWyD4Oi1yQg

Score

7^/10

Malware Config

Targets

- Target
  
  4c71fb33ac694031e4e1c5ef09fa4578_JaffaCakes118
- Size
  
  30KB
- MD5
  
  4c71fb33ac694031e4e1c5ef09fa4578
- SHA1
  
  4f5375388479fbf9ba5851bc5b3565e0abc67111
- SHA256
  
  f2d2aff9b441c6dd54180d1431bd241a56367ac1940ab62ad96047e4625d1a28
- SHA512
  
  e50916fd9f37f359624dfb96fdf26aea611dc59603b4fd4c946520cf53bd37ac09b7ab933adb24599fbff03612aab54c70fb95649df0b82716709713e7e6a672
- SSDEEP
  
  768:8mvGIG2gMVRZ58JSGxE+VOWJEDvwjtQGQEX1nyN+gK:M7MoEyOWyD4Oi1yQg
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2