4f153c2632f0d91886154f8925710a6968fab07cc5c4ee137c99d8a529a3978d | Triage

Sharing

General

Target

b29cbcfdd0530454f7ae5c6fc57767b8_JaffaCakes118
Size

14KB
Sample

240821-jex2kszgll
MD5

b29cbcfdd0530454f7ae5c6fc57767b8
SHA1

0a1b625a3334d94ef3b90367bb4d96fbcb11bf15
SHA256

4f153c2632f0d91886154f8925710a6968fab07cc5c4ee137c99d8a529a3978d
SHA512

998b3c3aef6769aacbc012e3bfc4cbe782a19b0b8d598831ac6b01b0f6e6955cb0d0792a9beed762a87aa8066757cbff987dea86de9178734573495a98e17da5
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0pji:hDXWipuE+K3/SSHgx49i

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b29cbcfdd0530454f7ae5c6fc57767b8_JaffaCakes118
- Size
  
  14KB
- MD5
  
  b29cbcfdd0530454f7ae5c6fc57767b8
- SHA1
  
  0a1b625a3334d94ef3b90367bb4d96fbcb11bf15
- SHA256
  
  4f153c2632f0d91886154f8925710a6968fab07cc5c4ee137c99d8a529a3978d
- SHA512
  
  998b3c3aef6769aacbc012e3bfc4cbe782a19b0b8d598831ac6b01b0f6e6955cb0d0792a9beed762a87aa8066757cbff987dea86de9178734573495a98e17da5
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0pji:hDXWipuE+K3/SSHgx49i
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2