6414f9993f90a81637935cfaa9643aa5f6c20df1cdd4bd6cbf2191ff3593b293 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2d65aa920a0b46183500e8ac03dd888_JaffaCakes118
Size

228KB
Sample

240817-rfbtqszbje
MD5

a2d65aa920a0b46183500e8ac03dd888
SHA1

abfdf05f5732315ea4704fa345b956a49fb286cb
SHA256

6414f9993f90a81637935cfaa9643aa5f6c20df1cdd4bd6cbf2191ff3593b293
SHA512

7a36cae9e7e39775f4184172db5719aa1218c5c512ed81b2e8d3367b092a93e0b074648f490951e866b488dbbb7e57c0b3fd34699670e82133461135f6bcfc9b
SSDEEP

6144:J4lRkAehaKuqT+FjblnpYPWx5U418Lw+dlG:JkWAehJuqT0pYPi5ULdlG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a2d65aa920a0b46183500e8ac03dd888_JaffaCakes118
- Size
  
  228KB
- MD5
  
  a2d65aa920a0b46183500e8ac03dd888
- SHA1
  
  abfdf05f5732315ea4704fa345b956a49fb286cb
- SHA256
  
  6414f9993f90a81637935cfaa9643aa5f6c20df1cdd4bd6cbf2191ff3593b293
- SHA512
  
  7a36cae9e7e39775f4184172db5719aa1218c5c512ed81b2e8d3367b092a93e0b074648f490951e866b488dbbb7e57c0b3fd34699670e82133461135f6bcfc9b
- SSDEEP
  
  6144:J4lRkAehaKuqT+FjblnpYPWx5U418Lw+dlG:JkWAehJuqT0pYPi5ULdlG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2