1939fa568c8820d30e55ebd99dbac749c85d8c69c058406f56e61c0b822171e3 | Triage

Sharing

General

Target

862f9aa1b4519f592e85fccfba03ac10_JaffaCakes118
Size

14KB
Sample

240810-qfsxks1ank
MD5

862f9aa1b4519f592e85fccfba03ac10
SHA1

184355e4425bc122c6a20992385d019a1b03e1e6
SHA256

1939fa568c8820d30e55ebd99dbac749c85d8c69c058406f56e61c0b822171e3
SHA512

64d2b9d824f0800f5d332779e94d9f72078227b5d67cd11438abf36703deab5412015a9b78066db56cc3032990bb396cc4afb62606faca1af56a10cc8e349255
SSDEEP

192:x4HammBJulY8NaslNnuj0actyzLodculJru4eFnjm1VbBxGs:x+mBJb8NPNujdwHruHpm1RBxG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  862f9aa1b4519f592e85fccfba03ac10_JaffaCakes118
- Size
  
  14KB
- MD5
  
  862f9aa1b4519f592e85fccfba03ac10
- SHA1
  
  184355e4425bc122c6a20992385d019a1b03e1e6
- SHA256
  
  1939fa568c8820d30e55ebd99dbac749c85d8c69c058406f56e61c0b822171e3
- SHA512
  
  64d2b9d824f0800f5d332779e94d9f72078227b5d67cd11438abf36703deab5412015a9b78066db56cc3032990bb396cc4afb62606faca1af56a10cc8e349255
- SSDEEP
  
  192:x4HammBJulY8NaslNnuj0actyzLodculJru4eFnjm1VbBxGs:x+mBJb8NPNujdwHruHpm1RBxG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2