c6c5dc1fa2b637f09c9e1d6190108582447253b72334dd002cd9af8472a76161 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1890c0c74db43f3fb649c19e375cdb1_JaffaCakes118
Size

1.1MB
Sample

240821-a7sswssaqb
MD5

b1890c0c74db43f3fb649c19e375cdb1
SHA1

2e709b915f7cb4171efc4f4699eb25bcefa85774
SHA256

c6c5dc1fa2b637f09c9e1d6190108582447253b72334dd002cd9af8472a76161
SHA512

382db4f3f71b2d23e0a3b4158253e115e380604939e0a2c8b75548372eeb8ee519daed9e5b31182f61189f7e8cb9c24f7c64668e142624ca308b0668dac8af38
SSDEEP

24576:ZMR3bSXZSXOO+GYKSjqXqe/GVKWl3MBOR3uXQWuGYKS:ZMAT1UXqe/LWlVWu1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b1890c0c74db43f3fb649c19e375cdb1_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  b1890c0c74db43f3fb649c19e375cdb1
- SHA1
  
  2e709b915f7cb4171efc4f4699eb25bcefa85774
- SHA256
  
  c6c5dc1fa2b637f09c9e1d6190108582447253b72334dd002cd9af8472a76161
- SHA512
  
  382db4f3f71b2d23e0a3b4158253e115e380604939e0a2c8b75548372eeb8ee519daed9e5b31182f61189f7e8cb9c24f7c64668e142624ca308b0668dac8af38
- SSDEEP
  
  24576:ZMR3bSXZSXOO+GYKSjqXqe/GVKWl3MBOR3uXQWuGYKS:ZMAT1UXqe/LWlVWu1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2