e0f3e377a7074d60b5417f3ac764e2ee849ab9594162d9f267c17674c2ca57e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74286769a5f7b43d0a96a5511288a6fe_JaffaCakes118
Size

14KB
Sample

240726-p8fmaasfrf
MD5

74286769a5f7b43d0a96a5511288a6fe
SHA1

2f14c00c46bcb39ffff2353d7abb7fb451381528
SHA256

e0f3e377a7074d60b5417f3ac764e2ee849ab9594162d9f267c17674c2ca57e4
SHA512

58d82d58e6192c16a143270f0e3062a4ad2ea50f205c8c853e4a0ed94ed0b9736d22ddaa81ac1b4f465f9dd836188b8fb5ff8871e7657d11abd889f6f56494f5
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hs:hDXWipuE+K3/SSHgxmn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  74286769a5f7b43d0a96a5511288a6fe_JaffaCakes118
- Size
  
  14KB
- MD5
  
  74286769a5f7b43d0a96a5511288a6fe
- SHA1
  
  2f14c00c46bcb39ffff2353d7abb7fb451381528
- SHA256
  
  e0f3e377a7074d60b5417f3ac764e2ee849ab9594162d9f267c17674c2ca57e4
- SHA512
  
  58d82d58e6192c16a143270f0e3062a4ad2ea50f205c8c853e4a0ed94ed0b9736d22ddaa81ac1b4f465f9dd836188b8fb5ff8871e7657d11abd889f6f56494f5
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hs:hDXWipuE+K3/SSHgxmn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2