ab1612c117b92e7b97e472b3d8ecf7bd2accc0095e6f6524342467017f5715ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0a9873816555b1e322870c5c662f902_JaffaCakes118
Size

1.3MB
Sample

240820-yyrq8s1dqf
MD5

b0a9873816555b1e322870c5c662f902
SHA1

af90d7dfb75683d5bce2c2be92c01504726184e7
SHA256

ab1612c117b92e7b97e472b3d8ecf7bd2accc0095e6f6524342467017f5715ae
SHA512

3312da0478421b75383218504d8fe2f32ef493a48e344859cbc7ead50497a6f0ec8832406c4a167e3017bee5b9f3ffea47a7cf59644bd574b65617ebdc3ebbf4
SSDEEP

24576:03edQbC8W5A0YirYhicGy0t8wLvbeZqcR5aByQJmHymEe58TY0Zix+hmo3zS+7PJ:03eIQg6y0nc5ifJSymL58RZxBz7Pfa3e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b0a9873816555b1e322870c5c662f902_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  b0a9873816555b1e322870c5c662f902
- SHA1
  
  af90d7dfb75683d5bce2c2be92c01504726184e7
- SHA256
  
  ab1612c117b92e7b97e472b3d8ecf7bd2accc0095e6f6524342467017f5715ae
- SHA512
  
  3312da0478421b75383218504d8fe2f32ef493a48e344859cbc7ead50497a6f0ec8832406c4a167e3017bee5b9f3ffea47a7cf59644bd574b65617ebdc3ebbf4
- SSDEEP
  
  24576:03edQbC8W5A0YirYhicGy0t8wLvbeZqcR5aByQJmHymEe58TY0Zix+hmo3zS+7PJ:03eIQg6y0nc5ifJSymL58RZxBz7Pfa3e
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2