2cc33a07357b9709ce005af117f80c42aec6b7a0fff3dce6da20e8efa24c7445 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81f13b065ab472bf198e58cf1a659789_JaffaCakes118
Size

2.6MB
Sample

240801-16qv1stckh
MD5

81f13b065ab472bf198e58cf1a659789
SHA1

81498b537b4b1effc236780a6eda893b0c95f869
SHA256

2cc33a07357b9709ce005af117f80c42aec6b7a0fff3dce6da20e8efa24c7445
SHA512

dba724437cbeb4274a51f3d08ce284f51f9c5f2da57d63189a8873cc33ba318ac08b7c2fd8a7f78785ebede0bc600072eed3b94c9e681b6d6b8d7e50e98cd6b4
SSDEEP

49152:oDy796EvMtTx435MtV+On5vMNbcwO6m2zGKYraTh+ZTOdFrxviiBI1rg:f7AEvgVOA5WbcoHzGlr8h+5q4i7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  81f13b065ab472bf198e58cf1a659789_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  81f13b065ab472bf198e58cf1a659789
- SHA1
  
  81498b537b4b1effc236780a6eda893b0c95f869
- SHA256
  
  2cc33a07357b9709ce005af117f80c42aec6b7a0fff3dce6da20e8efa24c7445
- SHA512
  
  dba724437cbeb4274a51f3d08ce284f51f9c5f2da57d63189a8873cc33ba318ac08b7c2fd8a7f78785ebede0bc600072eed3b94c9e681b6d6b8d7e50e98cd6b4
- SSDEEP
  
  49152:oDy796EvMtTx435MtV+On5vMNbcwO6m2zGKYraTh+ZTOdFrxviiBI1rg:f7AEvgVOA5WbcoHzGlr8h+5q4i7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2