f6396c9bde6f7fbaa8923e8b4fe6f5425da03d17ee5f51478e0ccfafd9298c71 | Triage

Sharing

General

Target

6829cd44c4455b477d6b05d169164f42_JaffaCakes118
Size

14KB
Sample

240723-s19f6szfmh
MD5

6829cd44c4455b477d6b05d169164f42
SHA1

fc463f3c5c939adc99f39c9a8d3199e6abd5303d
SHA256

f6396c9bde6f7fbaa8923e8b4fe6f5425da03d17ee5f51478e0ccfafd9298c71
SHA512

f7553fd54424e1b1231849e0d76f86f4684eb402149493e4cf991e94e268e2b593eafd3d153814bef3e10239800416f3b2cab837294b0da768a40f32f2503f39
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhi6z:hDXWipuE+K3/SSHgx1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6829cd44c4455b477d6b05d169164f42_JaffaCakes118
- Size
  
  14KB
- MD5
  
  6829cd44c4455b477d6b05d169164f42
- SHA1
  
  fc463f3c5c939adc99f39c9a8d3199e6abd5303d
- SHA256
  
  f6396c9bde6f7fbaa8923e8b4fe6f5425da03d17ee5f51478e0ccfafd9298c71
- SHA512
  
  f7553fd54424e1b1231849e0d76f86f4684eb402149493e4cf991e94e268e2b593eafd3d153814bef3e10239800416f3b2cab837294b0da768a40f32f2503f39
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhi6z:hDXWipuE+K3/SSHgx1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2