afc891c79860d8b91a3fbdc26fac60143a21058d5acc753f7f2b261ca67d1d94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66d54fe23d1cfc714f5c9c4165b98c4f_JaffaCakes118
Size

120KB
Sample

240723-kd4neawgpe
MD5

66d54fe23d1cfc714f5c9c4165b98c4f
SHA1

1a5085e3797a4df27ff88ea1c73a7f8e43ce77f1
SHA256

afc891c79860d8b91a3fbdc26fac60143a21058d5acc753f7f2b261ca67d1d94
SHA512

e3e7669b276271ca1829e9836053a1a99fd175b52995cb10fd44c0e049a6df82e61e5cc20dd3e958baa7df75a49e71417d0d6466d9125ef0cb298f21058aebd0
SSDEEP

1536:/mGCQTonmYv5JdBN9d1Jzld8MTfFJELPAeMdP1pU3AEYwY0LnuFW:u8oV7dJiALdP7UwV0bf

Score

7^/10

Malware Config

Targets

- Target
  
  66d54fe23d1cfc714f5c9c4165b98c4f_JaffaCakes118
- Size
  
  120KB
- MD5
  
  66d54fe23d1cfc714f5c9c4165b98c4f
- SHA1
  
  1a5085e3797a4df27ff88ea1c73a7f8e43ce77f1
- SHA256
  
  afc891c79860d8b91a3fbdc26fac60143a21058d5acc753f7f2b261ca67d1d94
- SHA512
  
  e3e7669b276271ca1829e9836053a1a99fd175b52995cb10fd44c0e049a6df82e61e5cc20dd3e958baa7df75a49e71417d0d6466d9125ef0cb298f21058aebd0
- SSDEEP
  
  1536:/mGCQTonmYv5JdBN9d1Jzld8MTfFJELPAeMdP1pU3AEYwY0LnuFW:u8oV7dJiALdP7UwV0bf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2