accacdb6497ee0e30453485092a8f84fb91d2647474082362c8e5f7c9e555b48 | Triage

Sharing

General

Target

5b78efe310e350674de2e264c36c42fd_JaffaCakes118
Size

2.6MB
Sample

240719-l3xf3avgjq
MD5

5b78efe310e350674de2e264c36c42fd
SHA1

06b11c11b8a0bd9e8d4cc17c3a01c8168f960092
SHA256

accacdb6497ee0e30453485092a8f84fb91d2647474082362c8e5f7c9e555b48
SHA512

04dba2ceb08a91c7896c910e4d7c0e7e99e1e65d07e1cb8c2cde856af34a9b9375c3d3c6f2f39ae495850fe4371c712e196c30f0bc12719d186c939b396cf570
SSDEEP

49152:oDy796EvMtTx435MtV+On5vMNbcwO6m2zGKYraTh+ZTOdFrxviiBI1r2:f7AEvgVOA5WbcoHzGlr8h+5q4i5

Score

7^/10

Malware Config

Targets

- Target
  
  5b78efe310e350674de2e264c36c42fd_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  5b78efe310e350674de2e264c36c42fd
- SHA1
  
  06b11c11b8a0bd9e8d4cc17c3a01c8168f960092
- SHA256
  
  accacdb6497ee0e30453485092a8f84fb91d2647474082362c8e5f7c9e555b48
- SHA512
  
  04dba2ceb08a91c7896c910e4d7c0e7e99e1e65d07e1cb8c2cde856af34a9b9375c3d3c6f2f39ae495850fe4371c712e196c30f0bc12719d186c939b396cf570
- SSDEEP
  
  49152:oDy796EvMtTx435MtV+On5vMNbcwO6m2zGKYraTh+ZTOdFrxviiBI1r2:f7AEvgVOA5WbcoHzGlr8h+5q4i5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2