45054258a3f84036e54ad21b287a974a863def6637d5e739f996b12560225dc3 | Triage

Sharing

General

Target

a9791159c5f31a893679a99b0cc6d14a_JaffaCakes118
Size

322KB
Sample

240819-eeb2wssfmf
MD5

a9791159c5f31a893679a99b0cc6d14a
SHA1

18047c75332e1dd8d7fa6b2725335b0a0b864f03
SHA256

45054258a3f84036e54ad21b287a974a863def6637d5e739f996b12560225dc3
SHA512

92057cc971059df3c96ae77d70a27a1368f506b182618a8df9a720ad99a61489e528c79f63d880ee16858c58bbd017b9ebe7cbaaf1be3ad5fee29f709e6b3fe1
SSDEEP

6144:sl6A9EpKroUuHH70fV+QM6GgoZW93x678qe7PhkIOeVdHw0aNPsl5:q9EyBu70fRM9DWVRp7PhfdHuNPs/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a9791159c5f31a893679a99b0cc6d14a_JaffaCakes118
- Size
  
  322KB
- MD5
  
  a9791159c5f31a893679a99b0cc6d14a
- SHA1
  
  18047c75332e1dd8d7fa6b2725335b0a0b864f03
- SHA256
  
  45054258a3f84036e54ad21b287a974a863def6637d5e739f996b12560225dc3
- SHA512
  
  92057cc971059df3c96ae77d70a27a1368f506b182618a8df9a720ad99a61489e528c79f63d880ee16858c58bbd017b9ebe7cbaaf1be3ad5fee29f709e6b3fe1
- SSDEEP
  
  6144:sl6A9EpKroUuHH70fV+QM6GgoZW93x678qe7PhkIOeVdHw0aNPsl5:q9EyBu70fRM9DWVRp7PhfdHuNPs/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2