c9c3600ef6b80e527a85775a2e7622ea9aa0fae133fdf9712770b77b19e145b3 | Triage

Sharing

General

Target

a9f573f3e6cd023f7e7813eebb6edc26_JaffaCakes118
Size

14KB
Sample

240819-hbaanssdpk
MD5

a9f573f3e6cd023f7e7813eebb6edc26
SHA1

0c0255c2d631a1b844f7f6366dbe596ef741aa8c
SHA256

c9c3600ef6b80e527a85775a2e7622ea9aa0fae133fdf9712770b77b19e145b3
SHA512

f165e5b57aa6b1452dc57a05eb3bbc98b74448fc32cbcc15d7cc22cd0595ebdd22734ed70a8b434d0d98653f6a71734da09c256196353a57b891c6b19b42cc8d
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYJGD:hDXWipuE+K3/SSHgxmwD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a9f573f3e6cd023f7e7813eebb6edc26_JaffaCakes118
- Size
  
  14KB
- MD5
  
  a9f573f3e6cd023f7e7813eebb6edc26
- SHA1
  
  0c0255c2d631a1b844f7f6366dbe596ef741aa8c
- SHA256
  
  c9c3600ef6b80e527a85775a2e7622ea9aa0fae133fdf9712770b77b19e145b3
- SHA512
  
  f165e5b57aa6b1452dc57a05eb3bbc98b74448fc32cbcc15d7cc22cd0595ebdd22734ed70a8b434d0d98653f6a71734da09c256196353a57b891c6b19b42cc8d
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYJGD:hDXWipuE+K3/SSHgxmwD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2