e0a41d812a2122b571e3e5962244d74524e81380c73dfffafb3b6211bed80c4f | Triage

Sharing

General

Target

b1af7fd4ee97cd94351a8f92b95c4da9_JaffaCakes118
Size

59KB
Sample

240821-b76v7axhpl
MD5

b1af7fd4ee97cd94351a8f92b95c4da9
SHA1

01d710bb84016e31e368907fbb9d07c0edaa8d3e
SHA256

e0a41d812a2122b571e3e5962244d74524e81380c73dfffafb3b6211bed80c4f
SHA512

9575467e05e0fc51abc0cde7576dc04ea20dbbb78f29537a3c283db5594b204f94b883733647b586d4fe758211c2d1275b8327b9b8e059588df830b1ef59e03c
SSDEEP

768:gAtEhoYsUjKVjl9xw3x6nz7vj1wr3a9aPboGH8VzzNVmB9yvFLi+tRnp:gAtEcUKJ3zzj1wJbom8V3NVEAvxbt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b1af7fd4ee97cd94351a8f92b95c4da9_JaffaCakes118
- Size
  
  59KB
- MD5
  
  b1af7fd4ee97cd94351a8f92b95c4da9
- SHA1
  
  01d710bb84016e31e368907fbb9d07c0edaa8d3e
- SHA256
  
  e0a41d812a2122b571e3e5962244d74524e81380c73dfffafb3b6211bed80c4f
- SHA512
  
  9575467e05e0fc51abc0cde7576dc04ea20dbbb78f29537a3c283db5594b204f94b883733647b586d4fe758211c2d1275b8327b9b8e059588df830b1ef59e03c
- SSDEEP
  
  768:gAtEhoYsUjKVjl9xw3x6nz7vj1wr3a9aPboGH8VzzNVmB9yvFLi+tRnp:gAtEcUKJ3zzj1wJbom8V3NVEAvxbt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2