47f2a34c56e01a01d767c330ef9e55a9873fb169e51e7031d486591cb1670d8e | Triage

Sharing

General

Target

8330f2f030572870567c2ef84c4340b0_JaffaCakes118
Size

32KB
Sample

240802-f3jx3sshmf
MD5

8330f2f030572870567c2ef84c4340b0
SHA1

2ecd9453efab44c00c365d31d69179cac7083d07
SHA256

47f2a34c56e01a01d767c330ef9e55a9873fb169e51e7031d486591cb1670d8e
SHA512

14b30b71cf0b055de22be9e234fd88fe643020b075fe3ae9b3c20a5a80e97ed11b6870913dc9e9e89ec090a52c51756ae6e2b5a67f8fc547cb48a2e4869286f9
SSDEEP

384:GTccRM4ZFQHsqmlezG64NCgHcmtlXQiYs1h6wHQSYPpF/tBQ:OcsZFQHTm2G0gjPAlSYf8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8330f2f030572870567c2ef84c4340b0_JaffaCakes118
- Size
  
  32KB
- MD5
  
  8330f2f030572870567c2ef84c4340b0
- SHA1
  
  2ecd9453efab44c00c365d31d69179cac7083d07
- SHA256
  
  47f2a34c56e01a01d767c330ef9e55a9873fb169e51e7031d486591cb1670d8e
- SHA512
  
  14b30b71cf0b055de22be9e234fd88fe643020b075fe3ae9b3c20a5a80e97ed11b6870913dc9e9e89ec090a52c51756ae6e2b5a67f8fc547cb48a2e4869286f9
- SSDEEP
  
  384:GTccRM4ZFQHsqmlezG64NCgHcmtlXQiYs1h6wHQSYPpF/tBQ:OcsZFQHTm2G0gjPAlSYf8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2