055870438891b49c3764e5ac6fc58a9b1599edc86cf6e5a6de6f3a8a1c3b102b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8984075e17465f969eb49445f6bd0f5d_JaffaCakes118
Size

2.5MB
Sample

240811-jcg8ca1ajj
MD5

8984075e17465f969eb49445f6bd0f5d
SHA1

2096e75bb63a6c6bc1cc8501f5f672eb84621062
SHA256

055870438891b49c3764e5ac6fc58a9b1599edc86cf6e5a6de6f3a8a1c3b102b
SHA512

4bfe5de0e5b302516f06ed7b03c20f6f298a96e2f19d51e3f3e6e39afe2b62270d48554453c7dbc4086be87105ae8093d616a7ddc0d0cf88d5fc21f088517ee5
SSDEEP

49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rz:o7AEvgVOy29Ls3JslVYzjMO26i8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8984075e17465f969eb49445f6bd0f5d_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  8984075e17465f969eb49445f6bd0f5d
- SHA1
  
  2096e75bb63a6c6bc1cc8501f5f672eb84621062
- SHA256
  
  055870438891b49c3764e5ac6fc58a9b1599edc86cf6e5a6de6f3a8a1c3b102b
- SHA512
  
  4bfe5de0e5b302516f06ed7b03c20f6f298a96e2f19d51e3f3e6e39afe2b62270d48554453c7dbc4086be87105ae8093d616a7ddc0d0cf88d5fc21f088517ee5
- SSDEEP
  
  49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rz:o7AEvgVOy29Ls3JslVYzjMO26i8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2