09e9d01738fe9fbcf7fbc165aba42f72a2766f83ee24fae0d2d368a8f7a72e0b | Triage

Sharing

General

Target

75db01c8c2c40b75d70a290f4c086aa9_JaffaCakes118
Size

3.8MB
Sample

240726-1m17mszdqg
MD5

75db01c8c2c40b75d70a290f4c086aa9
SHA1

8c2f91b9e7565ae84841e6d0d684928901674fba
SHA256

09e9d01738fe9fbcf7fbc165aba42f72a2766f83ee24fae0d2d368a8f7a72e0b
SHA512

feade716992458e9bdf628298bd91ea4c273c14a2af7e7b1157d10b7a61077ec33f5eb5934ee944798cfdad62107fd68708e2fcb9354f979824e984f156c0ce3
SSDEEP

98304:mgtaf3lv94EdV5xujnTTeElreGy9G927MG0yYwna9r+tNxttaU:efZdV5xujOElX92YG0fwny6Lj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  75db01c8c2c40b75d70a290f4c086aa9_JaffaCakes118
- Size
  
  3.8MB
- MD5
  
  75db01c8c2c40b75d70a290f4c086aa9
- SHA1
  
  8c2f91b9e7565ae84841e6d0d684928901674fba
- SHA256
  
  09e9d01738fe9fbcf7fbc165aba42f72a2766f83ee24fae0d2d368a8f7a72e0b
- SHA512
  
  feade716992458e9bdf628298bd91ea4c273c14a2af7e7b1157d10b7a61077ec33f5eb5934ee944798cfdad62107fd68708e2fcb9354f979824e984f156c0ce3
- SSDEEP
  
  98304:mgtaf3lv94EdV5xujnTTeElreGy9G927MG0yYwna9r+tNxttaU:efZdV5xujOElX92YG0fwny6Lj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2