50b172dd00e1694b527e9fd79c527c9465681475c274ef45b14cc806982785de | Triage

Sharing

General

Target

b2c77003b19a72571062be941cda7ac6_JaffaCakes118
Size

14KB
Sample

240821-kfx9easfpj
MD5

b2c77003b19a72571062be941cda7ac6
SHA1

9d1f2fb2e5a82cad3537f5b953b4150c1682e9e8
SHA256

50b172dd00e1694b527e9fd79c527c9465681475c274ef45b14cc806982785de
SHA512

efc10302f3a7496c6f6a5c1b91f6c373963326774515baaff190b43618b15fe9422b19673bd53a1ddf46e887b5ea35cc3ecd185747b48b521a139693539c1888
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYDsx:hDXWipuE+K3/SSHgxmgx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2c77003b19a72571062be941cda7ac6_JaffaCakes118
- Size
  
  14KB
- MD5
  
  b2c77003b19a72571062be941cda7ac6
- SHA1
  
  9d1f2fb2e5a82cad3537f5b953b4150c1682e9e8
- SHA256
  
  50b172dd00e1694b527e9fd79c527c9465681475c274ef45b14cc806982785de
- SHA512
  
  efc10302f3a7496c6f6a5c1b91f6c373963326774515baaff190b43618b15fe9422b19673bd53a1ddf46e887b5ea35cc3ecd185747b48b521a139693539c1888
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYDsx:hDXWipuE+K3/SSHgxmgx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2