1fdca4e7e34bfc591a9c986eb311b8cb8fa96bb06a033ff5f7e9ec15042884f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a84c7afed8d6a29119b0f35afc21838f_JaffaCakes118
Size

15KB
Sample

240818-1et4cswapa
MD5

a84c7afed8d6a29119b0f35afc21838f
SHA1

89229bfca0b8b80b8edd573870787bd1898d8563
SHA256

1fdca4e7e34bfc591a9c986eb311b8cb8fa96bb06a033ff5f7e9ec15042884f7
SHA512

68519b7c5fcf6daa3da10446e610dad6c0a5be6dd7b98f559d8156b27002a2fda3e4ad843646002b8ba218da0f865f8b1186e04bb4712730b7a99dba05872aae
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJEHT:hDXWipuE+K3/SSHgxWT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a84c7afed8d6a29119b0f35afc21838f_JaffaCakes118
- Size
  
  15KB
- MD5
  
  a84c7afed8d6a29119b0f35afc21838f
- SHA1
  
  89229bfca0b8b80b8edd573870787bd1898d8563
- SHA256
  
  1fdca4e7e34bfc591a9c986eb311b8cb8fa96bb06a033ff5f7e9ec15042884f7
- SHA512
  
  68519b7c5fcf6daa3da10446e610dad6c0a5be6dd7b98f559d8156b27002a2fda3e4ad843646002b8ba218da0f865f8b1186e04bb4712730b7a99dba05872aae
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJEHT:hDXWipuE+K3/SSHgxWT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2