f223752a100e6e0ac4dd05bf708187d9d3d17adee506588f893ae98c1730561d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a52cbcd778432b91d8abe85f56e2ea51_JaffaCakes118
Size

14KB
Sample

240818-drr37ssdjd
MD5

a52cbcd778432b91d8abe85f56e2ea51
SHA1

7b64c7ffa0965f9ca80d8e573231642ca9f60757
SHA256

f223752a100e6e0ac4dd05bf708187d9d3d17adee506588f893ae98c1730561d
SHA512

80a41eadc6a044b24ab964e2bc5827908554560e78f88d661d457c867911c12c25425d30a06852d3854da7e0557ba35ad442463f27b9c8f4ca08813652760b99
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlX:hDXWipuE+K3/SSHgxmlX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a52cbcd778432b91d8abe85f56e2ea51_JaffaCakes118
- Size
  
  14KB
- MD5
  
  a52cbcd778432b91d8abe85f56e2ea51
- SHA1
  
  7b64c7ffa0965f9ca80d8e573231642ca9f60757
- SHA256
  
  f223752a100e6e0ac4dd05bf708187d9d3d17adee506588f893ae98c1730561d
- SHA512
  
  80a41eadc6a044b24ab964e2bc5827908554560e78f88d661d457c867911c12c25425d30a06852d3854da7e0557ba35ad442463f27b9c8f4ca08813652760b99
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlX:hDXWipuE+K3/SSHgxmlX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2