94b4c5282244a17d011b5bb9e1d81014507aa78a0cce655281bf07aaa343e174 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca8818395054d01ae08ea9813300819_JaffaCakes118
Size

364KB
Sample

240819-1cpqvs1apj
MD5

aca8818395054d01ae08ea9813300819
SHA1

d5b5bf1ec16c99072db5243dafcafa23cae7cf61
SHA256

94b4c5282244a17d011b5bb9e1d81014507aa78a0cce655281bf07aaa343e174
SHA512

543353519d456fe29901cf9bfa2b2ec1d8c6bac0d5dcb24c8734e87f0cccb1c4b629650fcaf3e40ee402d9ceb5d39cbf0ae3f6a6ca2ed8eec1dd625cf03cd4c2
SSDEEP

6144:mHEscVYHpDgNeaXcG1kRVTZxQXwUF8c7WfLpA4seBykFgIKD3M5KMam+H3RK:5KHyeactvZObx7KzI7sp4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aca8818395054d01ae08ea9813300819_JaffaCakes118
- Size
  
  364KB
- MD5
  
  aca8818395054d01ae08ea9813300819
- SHA1
  
  d5b5bf1ec16c99072db5243dafcafa23cae7cf61
- SHA256
  
  94b4c5282244a17d011b5bb9e1d81014507aa78a0cce655281bf07aaa343e174
- SHA512
  
  543353519d456fe29901cf9bfa2b2ec1d8c6bac0d5dcb24c8734e87f0cccb1c4b629650fcaf3e40ee402d9ceb5d39cbf0ae3f6a6ca2ed8eec1dd625cf03cd4c2
- SSDEEP
  
  6144:mHEscVYHpDgNeaXcG1kRVTZxQXwUF8c7WfLpA4seBykFgIKD3M5KMam+H3RK:5KHyeactvZObx7KzI7sp4
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2