3750428447b6dfbe629cf68349dd1d30736be1014d5692d949314e56139064bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84b4ff5deb7cd5cd9cda27166c7b743a_JaffaCakes118
Size

30KB
Sample

240810-efrhzavcll
MD5

84b4ff5deb7cd5cd9cda27166c7b743a
SHA1

90cc5335560c9df0b9fe3c1715ae74d91ab12a9f
SHA256

3750428447b6dfbe629cf68349dd1d30736be1014d5692d949314e56139064bb
SHA512

ec9c214e8e2b9f1fc7571f49147dcaa7658b8e6a7a57b07218e659acdf556cf09343c31969612be446f2170a0ee66721758037986c629f7b4653113b74765792
SSDEEP

384:HkUnCY/CWw6TbD78IZAK2DQD04H4xk6dNnONMzyu:HpCWx7l28AjxkGNnEq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  84b4ff5deb7cd5cd9cda27166c7b743a_JaffaCakes118
- Size
  
  30KB
- MD5
  
  84b4ff5deb7cd5cd9cda27166c7b743a
- SHA1
  
  90cc5335560c9df0b9fe3c1715ae74d91ab12a9f
- SHA256
  
  3750428447b6dfbe629cf68349dd1d30736be1014d5692d949314e56139064bb
- SHA512
  
  ec9c214e8e2b9f1fc7571f49147dcaa7658b8e6a7a57b07218e659acdf556cf09343c31969612be446f2170a0ee66721758037986c629f7b4653113b74765792
- SSDEEP
  
  384:HkUnCY/CWw6TbD78IZAK2DQD04H4xk6dNnONMzyu:HpCWx7l28AjxkGNnEq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2