cde089c96ce0988f528ad68fe2340153f22802435fe47a633c6bd98b182cefa8 | Triage

Sharing

General

Target

03f42598e4ca0031169787801ad68d8b_JaffaCakes118
Size

8KB
Sample

240728-a3nclsxgll
MD5

03f42598e4ca0031169787801ad68d8b
SHA1

3e21d86e90ad715e4efa4c34579326b5bb4b3c94
SHA256

cde089c96ce0988f528ad68fe2340153f22802435fe47a633c6bd98b182cefa8
SHA512

e674da19d563974330f081763e4f51e54fa42006dbcdd8d2b4196e2353f581fb91433b613504553d8ad66c106316e4cbb4d8057e8864bc0df915a3e942d3aee1
SSDEEP

96:ibOb9cRjiTxL4FN4/Eo2ty4UoC0lVFuC4BHs4MYWKZUXkYPYmHkqAVmf:ibrETxL4X4f0y4PJuC4BHBMYWK6XHS4f

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  03f42598e4ca0031169787801ad68d8b_JaffaCakes118
- Size
  
  8KB
- MD5
  
  03f42598e4ca0031169787801ad68d8b
- SHA1
  
  3e21d86e90ad715e4efa4c34579326b5bb4b3c94
- SHA256
  
  cde089c96ce0988f528ad68fe2340153f22802435fe47a633c6bd98b182cefa8
- SHA512
  
  e674da19d563974330f081763e4f51e54fa42006dbcdd8d2b4196e2353f581fb91433b613504553d8ad66c106316e4cbb4d8057e8864bc0df915a3e942d3aee1
- SSDEEP
  
  96:ibOb9cRjiTxL4FN4/Eo2ty4UoC0lVFuC4BHs4MYWKZUXkYPYmHkqAVmf:ibrETxL4X4f0y4PJuC4BHBMYWK6XHS4f
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2