aae40c7622a98a9216e1d1380a97e07ebf1c4261c312cb02f35f9497a656d6bf | Triage

Sharing

General

Target

94357bcee6e051f3ed958bb9faf2a7f4_JaffaCakes118
Size

17KB
Sample

240813-ww5tzatejl
MD5

94357bcee6e051f3ed958bb9faf2a7f4
SHA1

eeb82512110e536233548001a1ce30b22309f51b
SHA256

aae40c7622a98a9216e1d1380a97e07ebf1c4261c312cb02f35f9497a656d6bf
SHA512

61b76fbd3e720664c9a883efa7dd265bb95aa83624ac7c01eeb10df3b41b8aea619c7805fbdd553be39368aaab5d5d2b72a13f202ed4be90db9491a30580aac9
SSDEEP

384:DJ7sguG2vNILmoDfLUT7EVwttn5PmDc3kh/yfcz/an514xLg:DJ7GzVoDQT44tMDXh/yfky2xM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  94357bcee6e051f3ed958bb9faf2a7f4_JaffaCakes118
- Size
  
  17KB
- MD5
  
  94357bcee6e051f3ed958bb9faf2a7f4
- SHA1
  
  eeb82512110e536233548001a1ce30b22309f51b
- SHA256
  
  aae40c7622a98a9216e1d1380a97e07ebf1c4261c312cb02f35f9497a656d6bf
- SHA512
  
  61b76fbd3e720664c9a883efa7dd265bb95aa83624ac7c01eeb10df3b41b8aea619c7805fbdd553be39368aaab5d5d2b72a13f202ed4be90db9491a30580aac9
- SSDEEP
  
  384:DJ7sguG2vNILmoDfLUT7EVwttn5PmDc3kh/yfcz/an514xLg:DJ7GzVoDQT44tMDXh/yfky2xM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2