16cdcf1476bc57e3b3f8d55106296953787a54bed79a69c1bdb9afe404a13bf7 | Triage

Sharing

General

Target

ac8297e71178c599da7144e727533702_JaffaCakes118
Size

153KB
Sample

240819-zh62nayfnj
MD5

ac8297e71178c599da7144e727533702
SHA1

8c7abb9086bdd06e406efdb8070e099701b16f9c
SHA256

16cdcf1476bc57e3b3f8d55106296953787a54bed79a69c1bdb9afe404a13bf7
SHA512

03ea46175378e8c82015d986aa2e9d7aad5fe7fa1a1f3f753ebf8f9574eb883f670ea7810614f98e2c3233f21c04296724a890f782d193a151070535265fd8cf
SSDEEP

3072:AZvuCErCoXkdbTLBAMrAEi9/axmp2CF00hfGHd/Y:AZvuCYX6bmERmp2f0FEdw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ac8297e71178c599da7144e727533702_JaffaCakes118
- Size
  
  153KB
- MD5
  
  ac8297e71178c599da7144e727533702
- SHA1
  
  8c7abb9086bdd06e406efdb8070e099701b16f9c
- SHA256
  
  16cdcf1476bc57e3b3f8d55106296953787a54bed79a69c1bdb9afe404a13bf7
- SHA512
  
  03ea46175378e8c82015d986aa2e9d7aad5fe7fa1a1f3f753ebf8f9574eb883f670ea7810614f98e2c3233f21c04296724a890f782d193a151070535265fd8cf
- SSDEEP
  
  3072:AZvuCErCoXkdbTLBAMrAEi9/axmp2CF00hfGHd/Y:AZvuCYX6bmERmp2f0FEdw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2