eaf405987801cdca59c776c9be16209ea5d429c30a8ef61772ab440b4d1c3450 | Triage

Sharing

General

Target

78cdc3b4559cc3b8c3e9a042903fddc2_JaffaCakes118
Size

20KB
Sample

240727-t3p1zs1fnf
MD5

78cdc3b4559cc3b8c3e9a042903fddc2
SHA1

efb0bcfdc19144a98783c22adc5bea09a92d19b7
SHA256

eaf405987801cdca59c776c9be16209ea5d429c30a8ef61772ab440b4d1c3450
SHA512

d7b15d90ad8b49f7176eee9f6eab46d9fb80d39d8413c572e78845c719f6cffee2d406c5dba33eb57c367c150670dae256a8f4d1bb34cbe8931ef91dc1073b8c
SSDEEP

384:hNjxqkNeLInY9o2CtKIuPQLAcFEFq/WpSWmpknhu1jKnv7D3y:hNjgR3u2VQLAc2F7Smu1jKvC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  78cdc3b4559cc3b8c3e9a042903fddc2_JaffaCakes118
- Size
  
  20KB
- MD5
  
  78cdc3b4559cc3b8c3e9a042903fddc2
- SHA1
  
  efb0bcfdc19144a98783c22adc5bea09a92d19b7
- SHA256
  
  eaf405987801cdca59c776c9be16209ea5d429c30a8ef61772ab440b4d1c3450
- SHA512
  
  d7b15d90ad8b49f7176eee9f6eab46d9fb80d39d8413c572e78845c719f6cffee2d406c5dba33eb57c367c150670dae256a8f4d1bb34cbe8931ef91dc1073b8c
- SSDEEP
  
  384:hNjxqkNeLInY9o2CtKIuPQLAcFEFq/WpSWmpknhu1jKnv7D3y:hNjgR3u2VQLAc2F7Smu1jKvC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2