0b7a03d593560db34938fddedad10ccceb5940727c99ac48a4ff9d6bd15c3451 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89315c90bc9c7b49bf76c416ff3bb0fd_JaffaCakes118
Size

15KB
Sample

240811-gbl4ss1ekb
MD5

89315c90bc9c7b49bf76c416ff3bb0fd
SHA1

5d752196e41592142231106180bfef29d708e974
SHA256

0b7a03d593560db34938fddedad10ccceb5940727c99ac48a4ff9d6bd15c3451
SHA512

093d8d61bf7ff999f968cdaf88c3a0f4a16d5b9c26498b0184bb7a2497181457ad7c8a2a0b053f03d1c70b32df819dfe76ab149bba9bf3749889e9c1e7235791
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxp:hDXWipuE+K3/SSHgxmHL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  89315c90bc9c7b49bf76c416ff3bb0fd_JaffaCakes118
- Size
  
  15KB
- MD5
  
  89315c90bc9c7b49bf76c416ff3bb0fd
- SHA1
  
  5d752196e41592142231106180bfef29d708e974
- SHA256
  
  0b7a03d593560db34938fddedad10ccceb5940727c99ac48a4ff9d6bd15c3451
- SHA512
  
  093d8d61bf7ff999f968cdaf88c3a0f4a16d5b9c26498b0184bb7a2497181457ad7c8a2a0b053f03d1c70b32df819dfe76ab149bba9bf3749889e9c1e7235791
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMxp:hDXWipuE+K3/SSHgxmHL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2