20896378309005a63c2d63f5c8c856ab5ba73ff0c2dba18976ef59d037af02b1 | Triage

Sharing

General

Target

955719e33952977f83e0270e842f6b3d_JaffaCakes118
Size

2.5MB
Sample

240814-kfnd7sxdjl
MD5

955719e33952977f83e0270e842f6b3d
SHA1

1d2c5c8450bc0b831c5fdcee7493df3513b39d55
SHA256

20896378309005a63c2d63f5c8c856ab5ba73ff0c2dba18976ef59d037af02b1
SHA512

5b195122442dd48069895438ff4ae892c3047aec73ccf932aa238e8ba7f0d611fb72728d55cc57ead6e2e2204787b0f7eb22c6ad6f96950cc980a6e0b6a535e9
SSDEEP

49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rw:o7AEvgVOy29Ls3JslVYzjMO26iz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  955719e33952977f83e0270e842f6b3d_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  955719e33952977f83e0270e842f6b3d
- SHA1
  
  1d2c5c8450bc0b831c5fdcee7493df3513b39d55
- SHA256
  
  20896378309005a63c2d63f5c8c856ab5ba73ff0c2dba18976ef59d037af02b1
- SHA512
  
  5b195122442dd48069895438ff4ae892c3047aec73ccf932aa238e8ba7f0d611fb72728d55cc57ead6e2e2204787b0f7eb22c6ad6f96950cc980a6e0b6a535e9
- SSDEEP
  
  49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rw:o7AEvgVOy29Ls3JslVYzjMO26iz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2